Sql injection

2023-02-2612:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

critical

sourcecodester

online graduate tracer system

sql injection

remote attack

vdb-221798

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.1%

JSON

A vulnerability, which was classified as critical, has been found in SourceCodester Online Graduate Tracer System 1.0. Affected by this issue is some unknown functionality of the file tracking/admin/add_acc.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-221798 is the identifier assigned to this vulnerability.

CPENameOperatorVersion
online_graduate_tracer_systemeq1.0

CPE	Name	Operator	Version
	online_graduate_tracer_system	eq	1.0

References

blog.csdn.net/weixin_43864034/article/details/129228718

vuldb.com/?ctiid.221798

vuldb.com/?id.221798