CVE-2023-1310: A vulnerability, which was classified as critical, has been found in SourceCodester Online Graduate Tracer System 1.0. Affected by this issue is some unknown functionality of the file admin/prof.ph...

Summary

A vulnerability, which was classified as critical, has been found in SourceCodester Online Graduate Tracer System 1.0. Affected by this issue is some unknown functionality of the file admin/prof.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
online_graduate_tracer_system_project	online_graduate_tracer_system	1.0 `cpe:2.3:a:online_graduate_tracer_system_project:online_graduate_tracer_system:1.0:::::::*`

Original advisory text

A vulnerability, which was classified as critical, has been found in SourceCodester Online Graduate Tracer System 1.0. Affected by this issue is some unknown functionality of the file admin/prof.ph...

A vulnerability, which was classified as critical, has been found in SourceCodester Online Graduate Tracer System 1.0. Affected by this issue is some unknown functionality of the file admin/prof.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-222698 is the identifier assigned to this vulnerability.

References

https://github.com/gtest1112/111/blob/main/sqli-3.md Exploit
https://vuldb.com/?ctiid.222698 Third Party Advisory
https://vuldb.com/?id.222698 Third Party Advisory