CVE-2023-2770: A vulnerability classified as critical was found in SourceCodester Online Exam System 1.0. This vulnerability affects unknown code of the file /kelasdosen/data. The manipulation of the argument col...

Summary

A vulnerability classified as critical was found in SourceCodester Online Exam System 1.0. This vulnerability affects unknown code of the file /kelasdosen/data. The manipulation of the argument columns[1][data] leads to sql injection. The attack can be initiated remotely. The exploit has been disclo...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
online_exam_system_project	online_exam_system	1.0 `cpe:2.3:a:online_exam_system_project:online_exam_system:1.0:::::::*`

Original advisory text

A vulnerability classified as critical was found in SourceCodester Online Exam System 1.0. This vulnerability affects unknown code of the file /kelasdosen/data. The manipulation of the argument col...

A vulnerability classified as critical was found in SourceCodester Online Exam System 1.0. This vulnerability affects unknown code of the file /kelasdosen/data. The manipulation of the argument columns[1][data] leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-229276.

References

https://github.com/tht1997/CVE_2023/blob/main/online_exam/kelasdosen.md Exploit Third Party Advisory
https://vuldb.com/?ctiid.229276 Permissions Required Third Party Advisory
https://vuldb.com/?id.229276 Permissions Required Third Party Advisory