Campcodes Online College Library System HTTP POST Request book_add.php sql injection

CVE-2023-7177

What is CVE-2023-7177?

A SQL injection vulnerability exists in the Campcodes Online College Library System 1.0, specifically within the HTTP POST Request Handler component located at /admin/book_add.php. By manipulating the 'category' argument, an attacker can execute arbitrary SQL queries against the database, potentially leading to unauthorized data access or modifications. This vulnerability can be exploited remotely, allowing attackers to interact with the system over the web. Publicly disclosed exploits are available, highlighting the urgency for users to apply the necessary security measures to protect their systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References