SourceCodester Engineers Online Portal my_students.php sql injection

CVE-2023-5280

What is CVE-2023-5280?

A vulnerability in the SourceCodester Engineers Online Portal 1.0 has been identified that allows for SQL injection through improper handling of the 'id' parameter within the my_students.php file. This weakness enables an attacker to manipulate SQL queries executed by the application, potentially leading to unauthorized access to sensitive data. As the exploit is publicly disclosed, it poses a significant risk, particularly as it can be executed remotely. It is crucial for users of the affected product to apply security patches and implement protective measures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References