PT-2022-18148 · Sourcecodester · Sourcecodester Simple E-Learning System
CVSS v3.1
6.3
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
SourceCodester Simple E-Learning System (affected versions not specified)
Description
A critical issue was found in the SourceCodester Simple E-Learning System, affecting an unknown function of the file comment frame.php. The manipulation of the
post id argument leads to SQL injection, allowing remote attacks. The exploit has been disclosed publicly.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Sourcecodester Simple E-Learning System