First published: Sun May 14 2023(Updated: )
A vulnerability was found in SourceCodester Online Exam System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /mahasiswa/data of the component POST Parameter Handler. The manipulation of the argument columns[1][data] leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-228974 is the identifier assigned to this vulnerability.
Credit: cna@vuldb.com cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
Kashipara Online Exam System | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-2693 is classified as a critical vulnerability.
To remediate CVE-2023-2693, update the SourceCodester Online Exam System to a secure version that addresses this vulnerability.
CVE-2023-2693 is an SQL injection vulnerability affecting the POST Parameter Handler.
CVE-2023-2693 affects SourceCodester Online Exam System version 1.0.
The vulnerability in CVE-2023-2693 is found in the file /mahasiswa/data of the component POST Parameter Handler.