CVE-2022-3671

MEDIUM 6.3

SourceCodester eLearning System manage.php sql injection

CVSS Score

6.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability classified as critical was found in SourceCodester eLearning System 1.0. This vulnerability affects unknown code of the file /admin/students/manage.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-212014 is the identifier assigned to this vulnerability.

CWE	CWE-89
Vendor	sourcecodester
Product	elearning system
Published	Oct 26, 2022
Last Updated	Aug 3, 2024

Stay Ahead of the Next One

Get instant alerts for sourcecodester elearning system

Be the first to know when new medium vulnerabilities affecting sourcecodester elearning system are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

SourceCodester / eLearning System

1.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/?id.212014 vuldb.com: https://vuldb.com/?ctiid.212014 vuldb.com: https://vuldb.com/?submit.49576 github.com: https://github.com/anx0ing/CVE_demo/blob/main/2022/eLearning%20System-SQL%20injections.md

Credits

🔍 anx0ing (VulDB User)