Lucene search

CVE-2023-25432

🗓️ 28 Feb 2023 18:10:15Reported by mitreType

cve🔗 web.nvd.nist.gov👁 84 Views🌐 WEB

Issue discovered in Online Reviewer Management System v1.0 - SQL injection via course-update.ph

Reporter	Title	Published	Views	Family All 3
Prion	Sql injection	28 Feb 202318:15	–	prion
NVD	CVE-2023-25432	28 Feb 202318:15	–	nvd
Cvelist	CVE-2023-25432	28 Feb 202300:00	–	cvelist

Nvd

Node

online_reviewer_management_system_project online_reviewer_management_systemMatch1.0

Source	Link
github	www.github.com/hundanchen69/bug_report/blob/main/vendors/janobe/Online%20Reviewer%20Management%20System/SQLi-1.md

Parameter	Position	Path	Description	CWE
	request body	/reviewer_0/admins/assessments/course/course-update.php	SQL injection vulnerability in the course-update.php endpoint allowing direct database instructions.	CWE-89

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

28 Feb 2023 18:15Current

7.3High risk

Vulners AI Score7.3

CVSS37.2

EPSS0.00214

CWE-89