CVE-2023-30016: SQL Injection
Published Jan 12, 2024
·Updated
SQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers to execute arbitrary code and obtain sensitive information via subeventid parameter in subeventdetailsedit.php.
Affected Software
1 affected component
oretnom23 Judging Management System=1.0
Event History
Jan 12, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-30016?
CVE-2023-30016 is classified as a critical SQL Injection vulnerability.
2
How do I fix CVE-2023-30016?
To fix CVE-2023-30016, validate and sanitize user inputs, especially the sub_event_id parameter in sub_event_details_edit.php.
3
Who is affected by CVE-2023-30016?
Users of the Judging Management System version 1.0 are affected by CVE-2023-30016.
4
What types of attacks can CVE-2023-30016 enable?
CVE-2023-30016 allows remote attackers to execute arbitrary code and access sensitive information.
5
When was CVE-2023-30016 disclosed?
CVE-2023-30016 was disclosed in 2023.