CVE-2023-2955 in Students Online Internship Timesheet Systeminformation

Résumé

par MITRE • 29/05/2023

A vulnerability, which was classified as critical, was found in SourceCodester Students Online Internship Timesheet System 1.0. Affected is an unknown function of the file rendered_report.php of the component GET Parameter Handler. The manipulation of the argument sid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-230142 is the identifier assigned to this vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsable

VulDB

Réserver

29/05/2023

Divulgation

29/05/2023

Modérer

accepté

Entrée

VDB-230142

CPE

prêt

Exploitation

Télécharger

EPSS

0.00779

KEV

non

Activités

très faible

Sources

Do you need the next level of professionalism?

Upgrade your account now!