CVE-2023-5283

🗓️ 29 Sep 2023 19:00:08Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 151 Views🌐 WEB

A critical SQL injection vulnerability in SourceCodester Engineers Online Portal 1.0 allows remote attackers to manipulate the argument 'firstname/lastname' in teacher_signup.php, leading to SQL injection. (CVE-2023-5283

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2023-5283	30 Sep 202300:38	–	circl
CNNVD	Engineers Online Portal SQL Injection Vulnerability	29 Sep 202300:00	–	cnnvd
Cvelist	CVE-2023-5283 SourceCodester Engineers Online Portal teacher_signup.php sql injection	29 Sep 202319:00	–	cvelist
EUVD	EUVD-2023-57607	3 Oct 202520:07	–	euvd
NVD	CVE-2023-5283	29 Sep 202320:15	–	nvd
OSV	CVE-2023-5283	29 Sep 202320:15	–	osv
Prion	Sql injection	29 Sep 202320:15	–	prion
Vulnrichment	CVE-2023-5283 SourceCodester Engineers Online Portal teacher_signup.php sql injection	29 Sep 202319:00	–	vulnrichment

NVD

Vulners

Vulnrichment

Node

engineers_online_portal_project engineers_online_portalMatch1.0

[
  {
    "vendor": "SourceCodester",
    "product": "Engineers Online Portal",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
github	www.github.com/llixixi/Engineers-Online-Portal-System/blob/main/Engineers%20Online%20Portal%20System%20teacher_signup.php%20%20has%20Sqlinjection.pdf

Parameter	Position	Path	Description	CWE
firstname	request body	teacher_signup.php	SQL injection vulnerability via manipulation of firstname/lastname in teacher_signup.php	CWE-89
lastname	request body	teacher_signup.php	SQL injection vulnerability via manipulation of firstname/lastname in teacher_signup.php	CWE-89

21 Nov 2024 08:41Current

7.3High risk

Vulners AI Score7.3

CVSS 3.16.3 - 8.8

CVSS 26.5

CVSS 36.3

EPSS0.00052

SSVC

CWE-89