CVE-2023-33584
CriticalCVSS 9.8Exploitation Probability (EPSS)
Very high risk96th percentile - higher than 96% of all known CVEs
Summary
The Sourcecodester Enrollment System Project V1.0 is vulnerable to SQL Injection (SQLI) attacks, allowing an attacker to manipulate SQL queries executed by the application. The application fails to properly validate user-supplied input in the username and password fields during the login process.
Risk Assessment
An attacker could exploit this vulnerability to gain unauthorized access to data in the database, potentially leading to serious security breaches and data loss.
Recommendation
It is recommended to implement proper input validation mechanisms and use prepared statements to minimize the risk of SQL Injection attacks.
Original NVD description (English source)
Sourcecodester Enrollment System Project V1.0 is vulnerable to SQL Injection (SQLI) attacks, which allow an attacker to manipulate the SQL queries executed by the application. The application fails to properly validate user-supplied input in the username and password fields during the login process, enabling an attacker to inject malicious SQL code.