2 matches found
Sql injection
A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file mystudents.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has bee...
CVE-2023-5280
SourceCodester Engineers Online Portal 1.0 contains a SQL injection in my_students.php via the id parameter, allowing remote exploitation. The vulnerability is publicly disclosed (VDB-240908) and can impact confidentiality, integrity, and availability per CVSS metrics; no specific remediation is ...