CVE-2023-4556
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
A critical vulnerability was found in the Online Graduate Tracer System 1.0, affecting the mysqli_query function in the sexit.php file. Manipulation of the id argument leads to SQL injection, which can be launched remotely.
Risk Assessment
An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to the exposure of sensitive information.
Recommendation
It is recommended to immediately update the system to the latest version and implement appropriate security measures to minimize the risk of an attack.
Original NVD description (English source)
A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. Affected by this issue is the function mysqli_query of the file sexit.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-238154 is the identifier assigned to this vulnerability.