CVEvulnerability
CVE-2023-1770
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2023-03-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
A vulnerability has been found in SourceCodester Grade Point Average GPA Calculator 1.0 and classified as critical. Affected by this vulnerability is the function get_scale of the file Master.php. The manipulation of the argument perc leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224671.
Affected configurations
• grade point average \(gpa\) calculator project grade point average \(gpa\) calculator 1.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- https://github.com/Pe4cefulSnow/SQL-Injection/blob/main/README.md Exploit, Third Party Advisory
- https://vuldb.com/?ctiid.224671 Third Party Advisory
- https://vuldb.com/?id.224671 Third Party Advisory
- https://github.com/Pe4cefulSnow/SQL-Injection/blob/main/README.md Exploit, Third Party Advisory
- https://vuldb.com/?ctiid.224671 Third Party Advisory
- https://vuldb.com/?id.224671 Third Party Advisory