CVE-2023-6617: medium-severity vulnerability in SourceCodester Simple Student Attendance System
SourceCodester Simple Student Attendance System attendance.php sql injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.5epss 0.8%
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been classified as critical. Affected is an unknown function of the file attendance.php. The manipulation of the argument class_id leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-247254 is the identifier assigned to this vulnerability.
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected products
SourceCodester · Simple Student Attendance SystemRelated CVEs — SourceCodester Simple Student Attendance System
In the same product, most dangerous first.
CVE-2023-6657MEDIUMSourceCodester Simple Student Attendance System student_form.php sql injectionEPSS 0.9%CVE-2023-6618MEDIUMSourceCodester Simple Student Attendance System index.php file inclusionEPSS 0.9%CVE-2024-1923MEDIUMSourceCodester Simple Student Attendance System List of Classes Page ajax-api.php delete_student sql injectionEPSS 0.8%CVE-2023-6658MEDIUMSourceCodester Simple Student Attendance System sql injectionEPSS 0.8%CVE-2023-6619MEDIUMSourceCodester Simple Student Attendance System class_form.php sql injectionEPSS 0.8%CVE-2023-7058MEDIUMSourceCodester Simple Student Attendance System path traversalEPSS 0.7%