Sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit h...

CVE-2023-5280 SourceCodester Engineers Online Portal my_students.php sql injection

A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file mystudents.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has bee...

CVE-2023-5280 SourceCodester Engineers Online Portal my_students.php sql injection

A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file mystudents.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has bee...

CVE-2023-5280

SourceCodester Engineers Online Portal 1.0 contains a SQL injection in my_students.php via the id parameter, allowing remote exploitation. The vulnerability is publicly disclosed (VDB-240908) and can impact confidentiality, integrity, and availability per CVSS metrics; no specific remediation is ...

CVE-2023-5279

CVE-2023-5279 affects SourceCodester Engineers Online Portal 1.0, with the vulnerability in the file with unknown functionality, my_classmates.php. The issue arises from manipulating the parameter teacher_class_student_id , enabling a SQL injection . Several connected sources report remote access...

CVE-2023-5279 SourceCodester Engineers Online Portal my_classmates.php sql injection

A vulnerability has been found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file myclassmates.php. The manipulation of the argument teacherclassstudentid leads to sql injection. The attack can be launch...

CVE-2023-5278 SourceCodester Engineers Online Portal login.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit h...

CVE-2023-5278 SourceCodester Engineers Online Portal login.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit h...

CVE-2023-5278

CVE-2023-5278 affects SourceCodester Engineers Online Portal 1.0, specifically the login.php file. The vulnerability is a SQL injection in the handling of the username/password parameters, enabling remote exploitation. Documents indicate exploitation has been disclosed publicly and that the impac...

CVE-2023-5277

CVE-2023-5277 affects SourceCodester Engineers Online Portal 1.0. The issue lies in processing of student_avatar.php where manipulation of the change parameter enables unrestricted file upload, enabling remote exploitation. Several connected sources corroborate unrestricted upload risk; no offici...

CVE-2023-5277 SourceCodester Engineers Online Portal student_avatar.php unrestricted upload

A vulnerability, which was classified as critical, has been found in SourceCodester Engineers Online Portal 1.0. This issue affects some unknown processing of the file studentavatar.php. The manipulation of the argument change leads to unrestricted upload. The attack may be initiated remotely. Th...

CVE-2023-5277 SourceCodester Engineers Online Portal student_avatar.php unrestricted upload

A vulnerability, which was classified as critical, has been found in SourceCodester Engineers Online Portal 1.0. This issue affects some unknown processing of the file studentavatar.php. The manipulation of the argument change leads to unrestricted upload. The attack may be initiated remotely. Th...

CVE-2023-5276 SourceCodester Engineers Online Portal downloadable_student.php sql injection

A vulnerability classified as critical was found in SourceCodester Engineers Online Portal 1.0. This vulnerability affects unknown code of the file downloadablestudent.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The identifier of this...

CVE-2023-5276

CVE-2023-5276 affects SourceCodester Engineers Online Portal v1.0, specifically the downloadable_student.php file where manipulation of the id parameter enables SQL injection. The root cause is unsanitized input leading to injection, with remote attack potential. Public details confirm the vulner...

PT-2023-32005 · Sourcecodester · Sourcecodester Engineers Online Portal

Name of the Vulnerable Software and Affected Versions: SourceCodester Engineers Online Portal version 1.0 Description: A critical vulnerability has been found in the SourceCodester Engineers Online Portal. The issue affects an unknown function of the file upload save student.php, where the...

PT-2023-32001

Name of the Vulnerable Software and Affected Versions SourceCodester Engineers Online Portal version 1.0 Description A critical issue was found in the file my students.php, where the manipulation of the id argument leads to SQL injection. This issue can be exploited remotely. The exploit has been...

PT-2023-32002 · Unknown +1 · Sourcecodester Engineers Online Portal +1

Name of the Vulnerable Software and Affected Versions: SourceCodester Engineers Online Portal version 1.0 Description: A critical issue has been found in the file remove inbox message.php, where the manipulation of the id argument leads to SQL injection. This can be initiated remotely. The issue...

Engineers Online Portal SQL Injection Vulnerability

Engineers Online Portal is open source an online portal . It is developed using PHP, MySQL database, HTML, CSS, Javascript, jQuery, Ajax, Bootstrap and some other libraries. An SQL injection vulnerability exists in SourceCodester Engineers Online Portal, which stems from the fact that manipulatio...

Engineers Online Portal SQL Injection Vulnerability

Engineers Online Portal is open source an online portal . It is developed using PHP, MySQL database, HTML, CSS, Javascript, jQuery, Ajax, Bootstrap and some other libraries. Engineers Online Portal suffers from a SQL injection vulnerability that stems from the fact that manipulation of the...

CVE-2023-5284: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical has been found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file uploadsavestudent.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to launch the attack remotely. The...