CVE-2023-5280

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Sep 29, 2023
Updated: Jun 4, 2024
CWE ID 476

Summary

CVE-2023-5280 is a newly disclosed critical vulnerability affecting the SourceCodester Engineers Online Portal 1.0. The issue lies in an unknown functionality of the file "my_students.php," which allows for SQL injection through manipulation of the argument "id." This vulnerability poses a remote exploit risk, and the exploit details have been made public, increasing the threat level. The identifier for this vulnerability is VDB-240908.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share