CVE-2023-5279: SourceCodester Engineers Online Portal my_classmates.php sql injection
A vulnerability has been found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file myclassmates.php. The manipulation of the argument teacherclassstudentid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-240907.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-5279?
The severity of CVE-2023-5279 is critical.
How does CVE-2023-5279 affect SourceCodester Engineers Online Portal 1.0?
CVE-2023-5279 affects an unknown functionality of the file my_classmates.php in SourceCodester Engineers Online Portal 1.0.
What is the vulnerability type of CVE-2023-5279?
CVE-2023-5279 is a SQL injection vulnerability.
Can I fix CVE-2023-5279?
Yes, CVE-2023-5279 can be fixed by implementing proper input validation and parameterized queries to prevent SQL injection.
Where can I find more information about CVE-2023-5279?
More information about CVE-2023-5279 can be found at the following references: [Reference 1](https://github.com/llixixi/Engineers-Online-Portal-System/blob/main/Engineers%20Online%20Portal%20System%20my_classmates.php%20%20has%20Sqlinjection.pdf), [Reference 2](https://vuldb.com/?ctiid.240907), [Reference 3](https://vuldb.com/?id.240907)