2 matches found
CVE-2023-33584: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Enrollment System Project V1.0 is vulnerable to SQL Injection SQLI attacks, which allow an attacker to manipulate the SQL queries executed by the application. The application fails to properly validate user-supplied input in the username and password fields during the login process...
9.8CVSS8.2AI score0.14242EPSS
SaveExploits5References3
20