CVE-2023-33584

🗓️ 21 Jun 2023 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 82 Views🌐 WEB

Sourcecodester Enrollment System Project V1.0 vulnerable to SQL Injection (SQLI) attacks

Reporter	Title	Published	Views	Family All 15
0day.today	Enrollment System Project v1.0 - SQL Injection Authentication Bypass Vulnerability	6 Jun 202300:00	–	zdt
ATTACKERKB	CVE-2023-33584	21 Jun 202313:15	–	attackerkb
GithubExploit	Exploit for Cross-site Scripting in Phpgurukul Student_Study_Center_Management_System	16 Feb 202508:05	–	githubexploit
Circl	CVE-2023-33584	4 Jun 202300:00	–	circl
CNNVD	Enrollment System Project SQL注入漏洞	4 Jun 202300:00	–	cnnvd
Cvelist	CVE-2023-33584	21 Jun 202300:00	–	cvelist
Exploit DB	Enrollment System Project v1.0 - SQL Injection Authentication Bypass (SQLI)	4 Jun 202300:00	–	exploitdb
Nuclei	Enrollment System Project v1.0 - SQL Injection Authentication Bypass	17 Oct 202307:20	–	nuclei
NVD	CVE-2023-33584	21 Jun 202313:15	–	nvd
OSV	CVE-2023-33584	21 Jun 202313:15	–	osv

NVD

Vulnrichment

Node

Source	Link
github	www.github.com/sudovivek/My-CVE/blob/main/CVE-2023-33584_exploit.md
packetstormsecurity	www.packetstormsecurity.com/files/cve/CVE-2023-33584
sourcecodester	www.sourcecodester.com/php/14444/enrollment-system-project-source-code-using-phpmysql.html
exploit-db	www.exploit-db.com/exploits/51501
packetstormsecurity	www.packetstormsecurity.com/files/172718/Enrollment-System-Project-1.0-Authentication-Bypass-SQL-Injection.html

Parameter	Position	Path	Description	CWE
username	request body	localhost/enrollment/login.php	SQL injection in login authentication allows bypass by injecting payload in username/password fields.	CWE-89
password	request body	localhost/enrollment/login.php	SQL injection in login authentication allows bypass by injecting payload in username/password fields.	CWE-89

21 Nov 2024 08:05Current

9.8High risk

Vulners AI Score9.8

CVSS 3.19.8

EPSS0.30651

SSVC