CVE-2023-5283: SourceCodester Engineers Online Portal teacher_signup.php sql injection

Published Sep 29, 2023

Updated

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file teachersignup.php. The manipulation of the argument firstname/lastname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-240911.

Affected Software

1 affected component

Engineers Online Portal Project Engineers Online Portal=1.0

Event History

Sep 29, 2023

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-5283?

The severity of CVE-2023-5283 is high, with a severity value of 8.8.

How does CVE-2023-5283 affect SourceCodester Engineers Online Portal 1.0?

CVE-2023-5283 affects SourceCodester Engineers Online Portal 1.0 by allowing remote SQL injection through the manipulation of the 'firstname/lastname' argument in the 'teacher_signup.php' file.

Is CVE-2023-5283 exploitable remotely?

Yes, CVE-2023-5283 can be exploited remotely.

What is the Common Weakness Enumeration (CWE) ID for CVE-2023-5283?

The Common Weakness Enumeration (CWE) ID for CVE-2023-5283 is CWE-89.

How can I fix the SQL injection vulnerability in SourceCodester Engineers Online Portal 1.0?

To fix the SQL injection vulnerability in SourceCodester Engineers Online Portal 1.0, ensure that input validation and parameterized queries are implemented to prevent malicious SQL queries.