CVE-2023-5281: SourceCodester Engineers Online Portal remove_inbox_message.php sql injection

Published Sep 29, 2023

Updated

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been classified as critical. This affects an unknown part of the file removeinboxmessage.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-240909 was assigned to this vulnerability.

Affected Software

1 affected component

Engineers Online Portal Project Engineers Online Portal=1.0

Event History

Sep 29, 2023

CVE Published

via MITRE·06:31 PM

Data Sourced

via MITRE·06:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-5281?

The severity of CVE-2023-5281 is critical.

How does CVE-2023-5281 affect SourceCodester Engineers Online Portal 1.0?

CVE-2023-5281 affects an unknown part of the file remove_inbox_message.php in SourceCodester Engineers Online Portal 1.0.

What is the vulnerability type of CVE-2023-5281?

CVE-2023-5281 is a SQL injection vulnerability.

How can CVE-2023-5281 be exploited?

CVE-2023-5281 can be exploited remotely by manipulating the 'id' argument in remove_inbox_message.php.

Are there any references for CVE-2023-5281?

Yes, you can find references for CVE-2023-5281 at the following links: [Link 1](https://github.com/llixixi/Engineers-Online-Portal-System/blob/main/Engineers%20Online%20Portal%20System%20remove_inbox_message.php%20has%20Sqlinjection.pdf), [Link 2](https://vuldb.com/?ctiid.240909), [Link 3](https://vuldb.com/?id.240909).