CVE-2023-3094: falha de média gravidade em code-projects Agro-School Management System
code-projects Agro-School Management System btn_functions.php doUpdateQuestion sql injection
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.3epss 0.7%
A vulnerability classified as critical has been found in code-projects Agro-School Management System 1.0. Affected is the function doUpdateQuestion of the file btn_functions.php. The manipulation of the argument question_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-230670 is the identifier assigned to this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
code-projects · Agro-School Management SystemCVEs relacionadas — code-projects Agro-School Management System
No mesmo produto, das mais perigosas para as menos.
CVE-2023-3061MEDIUMcode-projects Agro-School Management System Attachment Image btn_functions.php unrestricted uploadEPSS 0.9%CVE-2023-3062MEDIUMcode-projects Agro-School Management System index.php sql injectionEPSS 0.8%CVE-2023-3310MEDIUMcode-projects Agro-School Management System loaddata.php sql injectionEPSS 0.7%CVE-2023-3339MEDIUMcode-projects Agro-School Management System exam-delete.php sql injectionEPSS 0.6%CVE-2023-3060LOWcode-projects Agro-School Management System btn_functions.php doAddQuestion cross site scriptingEPSS 0.6%