CVEvulnerability
CVE-2023-33584
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2023-06-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-89
Description
Sourcecodester Enrollment System Project V1.0 is vulnerable to SQL Injection (SQLI) attacks, which allow an attacker to manipulate the SQL queries executed by the application. The application fails to properly validate user-supplied input in the username and password fields during the login process, enabling an attacker to inject malicious SQL code.
Affected configurations
• enrollment system project enrollment system 1.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://packetstormsecurity.com/files/172718/Enrollment-System-Project-1.0-Authentication-Bypass-SQL-Injection.html Exploit, Third Party Advisory, VDB Entry
- https://github.com/sudovivek/My-CVE/blob/main/CVE-2023-33584_exploit.md github.com
- https://packetstormsecurity.com/files/cve/CVE-2023-33584 Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/51501 www.exploit-db.com
- https://www.sourcecodester.com/php/14444/enrollment-system-project-source-code-using-phpmysql.html Product
- http://packetstormsecurity.com/files/172718/Enrollment-System-Project-1.0-Authentication-Bypass-SQL-Injection.html Exploit, Third Party Advisory, VDB Entry
- https://github.com/sudovivek/My-CVE/blob/main/CVE-2023-33584_exploit.md github.com
- https://packetstormsecurity.com/files/cve/CVE-2023-33584 Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/51501 www.exploit-db.com
- https://www.sourcecodester.com/php/14444/enrollment-system-project-source-code-using-phpmysql.html Product