CVE-2023-5276: SourceCodester Engineers Online Portal downloadable_student.php sql injection

Published Sep 29, 2023

Updated

A vulnerability classified as critical was found in SourceCodester Engineers Online Portal 1.0. This vulnerability affects unknown code of the file downloadablestudent.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The identifier of this vulnerability is VDB-240904.

Affected Software

1 affected component

Engineers Online Portal Project Engineers Online Portal=1.0

Event History

Sep 29, 2023

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-5276?

The severity of CVE-2023-5276 is critical with a severity value of 9.8.

How does CVE-2023-5276 affect SourceCodester Engineers Online Portal 1.0?

CVE-2023-5276 affects SourceCodester Engineers Online Portal 1.0 through a SQL injection vulnerability in the downloadable_student.php file.

Is CVE-2023-5276 exploitable remotely?

Yes, CVE-2023-5276 can be exploited remotely.

How can I fix the SQL injection vulnerability in downloadable_student.php?

To fix the SQL injection vulnerability in downloadable_student.php, you should validate and sanitize user input and use parameterized queries or prepared statements.

What is the Common Weakness Enumeration (CWE) ID associated with CVE-2023-5276?

The Common Weakness Enumeration (CWE) ID associated with CVE-2023-5276 is CWE-89.