SourceCodester Online Reviewer Management System questions-view.php sql injection

CVE-2023-1038

What is CVE-2023-1038?

A SQL Injection vulnerability exists in the SourceCodester Online Reviewer Management System version 1.0. This flaw is found in an unspecified function within the file /reviewer_0/admins/assessments/pretest/questions-view.php, where improper validation of the input argument 'id' enables remote attackers to execute arbitrary SQL code. This vulnerability poses an elevated risk as it can be exploited over the network, allowing attackers to manipulate the database and potentially expose sensitive information. The exploit has been publicly disclosed, underscoring the importance of immediate remediation.

References