SourceCodester Faculty Evaluation System sql injection

CVE-2023-2962

Summary

A vulnerability exists within the SourceCodester Faculty Evaluation System 1.0 that allows attackers to exploit the 'id' argument in the file index.php?page=edit_user, leading to SQL injection attacks. This security flaw enables unauthorized remote access, potentially compromising sensitive data stored in the database. With the public disclosure of the exploit, it is crucial to address this vulnerability promptly to mitigate the risk of exploitation.

References