SourceCodester Grade Point Average GPA Calculator index.php information disclosure
CVE-2023-1769

7.5HIGH

Key Information:

Vendor
SourceCodester
Status
Grade Point Average GPA Calculator
Vendor
CVE Published:
31 March 2023

Summary

An information disclosure vulnerability has been identified in Version 1.0 of the Grade Point Average GPA Calculator by SourceCodester. This issue arises from an unspecified function in the file index.php, where the manipulation of the 'page' argument using a crafted input can reveal sensitive information. The specific exploit involves utilizing the 'php://filter/read=convert.base64-encode/resource=grade_table' filter, which can be executed remotely. As this vulnerability has been publicly disclosed, it poses a potential risk to users who have not applied necessary protections.

Affected Version(s)

Grade Point Average GPA Calculator 1.0

References

https://vuldb.com/?id.224670
vdb-entrytechnical-description
https://vuldb.com/?ctiid.224670
signaturepermissions-required
https://github.com/Pe4cefulSnow/CVE-Advisory/blob/main/RE...
broken-linkexploit

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Pe4cefulSnow (VulDB User)
.