CVE-2023-6619

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Dec 8, 2023
Updated: May 17, 2024
CWE ID 89

Summary

CVE-2023-6619 is a critical vulnerability identified in the SourceCodester Simple Student Attendance System 1.0. The issue lies within the unknown functionality of the file /modals/class_form.php, which is susceptible to SQL injection. Maliciously crafted input can be used to manipulate the argument id, leading to unauthorized access or data theft. The exploit for this vulnerability has been made public, increasing the risk of potential attacks. This security flaw, identified as VDB-247256, can have serious consequences if not remedied promptly.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share