SourceCodester Faculty Evaluation System sql injection

CVE-2023-2366

What is CVE-2023-2366?

A security vulnerability exists in SourceCodester's Faculty Evaluation System version 1.0, specifically in the ajax.php file where the action 'delete_class' is executed. An attacker can manipulate the 'id' argument, allowing for SQL injection attacks. This flaw enables an unauthorized user to execute malicious SQL queries, potentially leading to data exposure or manipulation. Given that this vulnerability can be exploited remotely, it poses significant risks to users and institutions relying on this system. Immediate attention is required to implement patches or mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References