CVE-2023-5279 SourceCodester Engineers Online Portal my_classmates.php sql injection

A vulnerability has been found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file myclassmates.php. The manipulation of the argument teacherclassstudentid leads to sql injection. The attack can be launch...

CVE-2023-5278 SourceCodester Engineers Online Portal login.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit h...

CVE-2023-5278

CVE-2023-5278 affects SourceCodester Engineers Online Portal 1.0, specifically the login.php file. The vulnerability is a SQL injection in the handling of the username/password parameters, enabling remote exploitation. Documents indicate exploitation has been disclosed publicly and that the impac...

CVE-2023-5277 SourceCodester Engineers Online Portal student_avatar.php unrestricted upload

A vulnerability, which was classified as critical, has been found in SourceCodester Engineers Online Portal 1.0. This issue affects some unknown processing of the file studentavatar.php. The manipulation of the argument change leads to unrestricted upload. The attack may be initiated remotely. Th...

CVE-2023-5277 SourceCodester Engineers Online Portal student_avatar.php unrestricted upload

A vulnerability, which was classified as critical, has been found in SourceCodester Engineers Online Portal 1.0. This issue affects some unknown processing of the file studentavatar.php. The manipulation of the argument change leads to unrestricted upload. The attack may be initiated remotely. Th...

CVE-2023-5276 SourceCodester Engineers Online Portal downloadable_student.php sql injection

A vulnerability classified as critical was found in SourceCodester Engineers Online Portal 1.0. This vulnerability affects unknown code of the file downloadablestudent.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The identifier of this...

CVE-2023-5279: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file myclassmates.php. The manipulation of the argument teacherclassstudentid leads to sql injection. The attack can be launch...

CVE-2023-5278: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit h...

CVE-2023-5276: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Engineers Online Portal 1.0. This vulnerability affects unknown code of the file downloadablestudent.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The identifier of this...

PT-2023-32002 · Unknown +1 · Sourcecodester Engineers Online Portal +1

Name of the Vulnerable Software and Affected Versions: SourceCodester Engineers Online Portal version 1.0 Description: A critical issue has been found in the file remove inbox message.php, where the manipulation of the id argument leads to SQL injection. This can be initiated remotely. The issue...

CVE-2023-5280: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file mystudents.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has bee...

CVE-2023-5282: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been declared as critical. This vulnerability affects unknown code of the file seedmessagestudent.php. The manipulation of the argument teacherid leads to sql injection. The attack can be initiated remotely. The explo...

CVE-2023-5277: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, has been found in SourceCodester Engineers Online Portal 1.0. This issue affects some unknown processing of the file studentavatar.php. The manipulation of the argument change leads to unrestricted upload. The attack may be initiated remotely. Th...

CVE-2023-5281: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been classified as critical. This affects an unknown part of the file removeinboxmessage.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2023-5284: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical has been found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file uploadsavestudent.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to launch the attack remotely. The...

CVE-2023-5283: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file teachersignup.php. The manipulation of the argument firstname/lastname leads to sql injection. The attack may be initiated remotely. The...

Sourcecodester Engineers Online Portal SQL Injection Vulnerability (CNVD-2021-99654)

Sourcecodester Engineers Online Portal is an open source online portal. sourcecodester Engineers Online Portal in PHP is vulnerable to SQL injection. An attacker can exploit the vulnerability to extract sensitive data from the web server via the id parameter of quizquestion.php and, in some cases...

Sourcecodester Engineers Online Portal SQL Injection Vulnerability (CNVD-2021-99650)

Sourcecodester Engineers Online Portal is an open source online portal. Sourcecodester Engineers Online Portal in PHP is vulnerable to SQL injection, which can be exploited by attackers to extract sensitive data from the web server via the announcesstudent.php id parameter of announcesstudent.php...

Sourcecodester Engineers Online Portal Access Control Error Vulnerability

Sourcecodester Engineers Online Portal is an open source online portal. niamunozmonitoringsystem/admin/uploads of Sourcecodester Engineers Online Portal in PHP is vulnerable to An access control error vulnerability can be exploited to bypass access control and access all files uploaded to the web...

CVE-2021-42670

A SQL injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter to the announcementsstudent.php web page. As a result a malicious user can extract sensitive data from the web server and in some cases use this vulnerability in order to get a remote code...