CVE-2023-1556: SourceCodester Judging Management System summary_results.php sql injection

Published Mar 22, 2023

Updated

A vulnerability was found in SourceCodester Judging Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file summaryresults.php. The manipulation of the argument maineventid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223549 was assigned to this vulnerability.

Affected Software

1 affected component

Judging Management System Project Judging Management System=1.0

Event History

Mar 22, 2023

CVE Published

10:31 AM

Data Sourced

10:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·11:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-1556?

The severity of CVE-2023-1556 is critical.

What is the affected software version of CVE-2023-1556?

The affected software version of CVE-2023-1556 is 1.0.

What is the CWE category of CVE-2023-1556?

The CWE category of CVE-2023-1556 is CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).

How can the sql injection vulnerability be exploited in summary_results.php?

The sql injection vulnerability in summary_results.php can be exploited by manipulating the main_event_id argument.

What is the fix for the sql injection vulnerability in summary_results.php?

To fix the sql injection vulnerability in summary_results.php, it is recommended to implement proper input sanitization and use prepared statements or parameterized queries for database interactions.