CVE-2023-2770

Name of the Vulnerable Software and Affected Versions SourceCodester Online Exam System version 1.0

Description A critical vulnerability was found in the SourceCodester Online Exam System, affecting unknown code of the file /kelasdosen/data. The manipulation of the argument columns[1][data] leads to SQL injection. The attack can be initiated remotely.

Recommendations For SourceCodester Online Exam System version 1.0, consider restricting access to the /kelasdosen/data file and avoid using the columns[1][data] argument in the affected API endpoint until a patch is available. As a temporary workaround, consider implementing input validation and sanitization to minimize the risk of SQL injection attacks.