CVE-2023-6617
SourceCodester Simple Student Attendance System attendance.php sql injection
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been classified as critical. Affected is an unknown function of the file attendance.php. The manipulation of the argument class_id leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-247254 is the identifier assigned to this vulnerability.
Se encontró una vulnerabilidad en SourceCodester Simple Student Attendance System 1.0. Ha sido clasificada como crítica. Una función desconocida del archivo Assistance.php es afectada por esta vulnerabilidad. La manipulación del argumento class_id conduce a la inyección de SQL. El exploit ha sido divulgado al público y puede utilizarse. VDB-247254 es el identificador asignado a esta vulnerabilidad.
Es wurde eine kritische Schwachstelle in SourceCodester Simple Student Attendance System 1.0 ausgemacht. Betroffen hiervon ist ein unbekannter Ablauf der Datei attendance.php. Durch das Manipulieren des Arguments class_id mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Der Exploit steht zur öffentlichen Verfügung.
CVSS Scores
SSVC
- Decision:Track
Timeline
- 2023-12-08 CVE Reserved
- 2023-12-08 CVE Published
- 2024-08-28 CVE Updated
- 2024-08-28 First Exploit
- 2024-11-07 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|---|---|
https://www.yuque.com/u39339523/el4dxs/gcsvdc5oohx6v38c | 2024-08-28 |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Oretnom23 Search vendor "Oretnom23" | Simple Student Attendance System Search vendor "Oretnom23" for product "Simple Student Attendance System" | 1.0 Search vendor "Oretnom23" for product "Simple Student Attendance System" and version "1.0" | - |
Affected
|