CVE-2023-6619: falha de média gravidade em SourceCodester Simple Student Attendance System
SourceCodester Simple Student Attendance System class_form.php sql injection
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.5epss 0.8%
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /modals/class_form.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-247256.
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
SourceCodester · Simple Student Attendance SystemCVEs relacionadas — SourceCodester Simple Student Attendance System
No mesmo produto, das mais perigosas para as menos.
CVE-2023-6657MEDIUMSourceCodester Simple Student Attendance System student_form.php sql injectionEPSS 0.9%CVE-2023-6618MEDIUMSourceCodester Simple Student Attendance System index.php file inclusionEPSS 0.9%CVE-2024-1923MEDIUMSourceCodester Simple Student Attendance System List of Classes Page ajax-api.php delete_student sql injectionEPSS 0.8%CVE-2023-6658MEDIUMSourceCodester Simple Student Attendance System sql injectionEPSS 0.8%CVE-2023-6617MEDIUMSourceCodester Simple Student Attendance System attendance.php sql injectionEPSS 0.8%CVE-2023-7058MEDIUMSourceCodester Simple Student Attendance System path traversalEPSS 0.7%