CVE-2023-6617: fallo de gravedad media en SourceCodester Simple Student Attendance System
SourceCodester Simple Student Attendance System attendance.php sql injection
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.5epss 0.8%
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been classified as critical. Affected is an unknown function of the file attendance.php. The manipulation of the argument class_id leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-247254 is the identifier assigned to this vulnerability.
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Productos afectados
SourceCodester · Simple Student Attendance SystemCVEs relacionadas — SourceCodester Simple Student Attendance System
En el mismo producto, de las más peligrosas a las menos.
CVE-2023-6657MEDIUMSourceCodester Simple Student Attendance System student_form.php sql injectionEPSS 0.9%CVE-2023-6618MEDIUMSourceCodester Simple Student Attendance System index.php file inclusionEPSS 0.9%CVE-2024-1923MEDIUMSourceCodester Simple Student Attendance System List of Classes Page ajax-api.php delete_student sql injectionEPSS 0.8%CVE-2023-6658MEDIUMSourceCodester Simple Student Attendance System sql injectionEPSS 0.8%CVE-2023-6619MEDIUMSourceCodester Simple Student Attendance System class_form.php sql injectionEPSS 0.8%CVE-2023-7058MEDIUMSourceCodester Simple Student Attendance System path traversalEPSS 0.7%