CVE-2023-33584
53Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendcvss 9.8epss 14%
probabilidade de exploração
14%top 4% das CVEs
exploração observada
nãonenhuma fonte reporta
3 exploit(s) público(s)
Sourcecodester Enrollment System Project V1.0 is vulnerable to SQL Injection (SQLI) attacks, which allow an attacker to manipulate the SQL queries executed by the application. The application fails to properly validate user-supplied input in the username and password fields during the login process, enabling an attacker to inject malicious SQL code.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
n/a · n/aPoCs públicas encontradas — 3✓ VexDay Proof
cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/51501cve_referencepacketstormsecurity.com/files/172718/Enrollment-System-Project-1.0-Authentication-Bypass-SQL-Injection.htmlnão verificadocve_referencepacketstormsecurity.com/files/cve/CVE-2023-33584não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://packetstormsecurity.com/files/172718/Enrollment-System-Project-1.0-Authentication-Bypass-SQL-Injection.htmlhttps://github.com/sudovivek/My-CVE/blob/main/CVE-2023-33584_exploit.mdhttps://packetstormsecurity.com/files/cve/CVE-2023-33584https://www.exploit-db.com/exploits/51501https://www.sourcecodester.com/php/14444/enrollment-system-project-source-code-using-phpmysql.html