CVE-2023-5280: SourceCodester Engineers Online Portal my_students.php sql injection

Published Sep 29, 2023

Updated

A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file mystudents.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-240908.

Affected Software

1 affected component

Engineers Online Portal Project Engineers Online Portal=1.0

Event History

Sep 29, 2023

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-5280?

The severity of CVE-2023-5280 is critical with a score of 9.8.

What is the affected software for CVE-2023-5280?

The affected software for CVE-2023-5280 is SourceCodester Engineers Online Portal 1.0.

What is the vulnerability type for CVE-2023-5280?

The vulnerability type for CVE-2023-5280 is SQL Injection.

How can the SQL Injection vulnerability be exploited in CVE-2023-5280?

The SQL Injection vulnerability in CVE-2023-5280 can be exploited remotely by manipulating the 'id' argument.

Are there any references available for CVE-2023-5280?

Yes, references for CVE-2023-5280 are available at the following links: [Link 1](https://github.com/llixixi/Engineers-Online-Portal-System/blob/main/Engineers%20Online%20Portal%20System%20my_students.php%20has%20Sqlinjection.pdf), [Link 2](https://vuldb.com/?ctiid.240908), [Link 3](https://vuldb.com/?id.240908).