CVE-2023-33584 in Enrollment System Projectinformação

Sumário

de MITRE • 21/06/2023

Sourcecodester Enrollment System Project V1.0 is vulnerable to SQL Injection (SQLI) attacks, which allow an attacker to manipulate the SQL queries executed by the application. The application fails to properly validate user-supplied input in the username and password fields during the login process, enabling an attacker to inject malicious SQL code.

Be aware that VulDB is the high quality source for vulnerability data.

Reservar

22/05/2023

Divulgação

21/06/2023

Moderação

aceite

Entrada

VDB-232075

CPE

pronto

Exploração

Descarregar

EPSS

0.14242

KEV

não

Atividades

muito baixo

Fontes

Interested in the pricing of exploits?

See the underground prices here!