CVE-2023-1854: medium-severity vulnerability in SourceCodester Online Graduate Tracer System
SourceCodester Online Graduate Tracer System session expiration
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.7epss 0.9%
A vulnerability, which was classified as problematic, was found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/. The manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-224994 is the identifier assigned to this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Affected products
SourceCodester · Online Graduate Tracer SystemRelated CVEs — SourceCodester Online Graduate Tracer System
In the same product, most dangerous first.
CVE-2024-7843MEDIUMSourceCodester Online Graduate Tracer System exportcs.php information disclosureEPSS 1.0%CVE-2024-7842MEDIUMSourceCodester Online Graduate Tracer System export_it.php information disclosureEPSS 1.0%CVE-2024-7809MEDIUMSourceCodester Online Graduate Tracer System nbproject exposure of information through directory listingEPSS 0.8%CVE-2023-4556MEDIUMSourceCodester Online Graduate Tracer System sexit.php mysqli_query sql injectionEPSS 0.7%CVE-2023-1394MEDIUMSourceCodester Online Graduate Tracer System bsitemp.php mysqli_query sql injectionEPSS 0.7%CVE-2023-1310MEDIUMSourceCodester Online Graduate Tracer System prof.php sql injectionEPSS 0.7%