CVE-2023-2693

SourceCodester Online Exam System 1.0 contains a SQL injection in the POST Parameter Handler ( /mahasiswa/data ) where manipulation of columns[1][data] enables remote exploitation. The vulnerability impacts unknown functionality; affected component is the POST Parameter Handler, with a root cause...

CVE-2023-2770

CVE-2023-2770 fixes a SQL injection in SourceCodester Online Exam System 1.0. The vulnerable component is the file /kelasdosen/data (affected by the columns[1][data] parameter), with remote exploitation and potential impact to confidentiality, integrity, and availability as noted in multiple sour...

CVE-2023-2694

CVE-2023-2694 affects SourceCodester Online Exam System 1.0, specifically the POST Parameter Handler file /dosen/data. The vulnerability arises from improper handling of the columns[1][data] parameter, enabling SQL injection and remote exploitation. Public disclosures exist, and multiple trusted ...

CVE-2023-2771

CVE-2023-2771 affects SourceCodester Online Exam System 1.0. The vulnerability is a SQL injection in the processing of the file /jurusanmatkul/data, caused by manipulation of the argument columns[1][data]. The issue is exploitable remotely, and public exploitation details are available. Affected ...

CVE-2023-2642

CVE-2023-2642 is a SQL injection vulnerability affecting SourceCodester Online Exam System 1.0. The issue resides in the file adminpanel/admin/facebox_modal/updateCourse.php, specifically in the GET Parameter Handler where manipulating the id argument enables an SQL injection. The vulnerability c...

CVE-2023-2697

CVE-2023-2697 affects SourceCodester Online Exam System 1.0. The vulnerability resides in the POST Parameter Handler, specifically the /jurusan/data file and the argument columns[1][data], whose manipulation leads to SQL injection. It is exploitable remotely, and the exploit has been disclosed pu...

CVE-2023-2695

The CVE-2023-2695 entry describes a SQL injection in the SourceCodester Online Exam System 1.0, specifically in the POST Parameter Handler component, targeting the /kelas/data file via the columns[1][data] parameter. The underlying cause is manipulation of that parameter leading to SQL injection,...

CVE-2023-2696

CVE-2023-2696 affects SourceCodester Online Exam System 1.0. The vulnerability resides in the POST Parameter Handler, specifically its /matkul/data processing, where manipulating the argument columns[1][data] enables SQL injection. Several connected sources confirm remote exploitation and public ...