• caglararli@hotmail.com
  • 05386281520

CVE-2023-6658 | SourceCodester Simple Student Attendance System 1.0 ajax-api.php class_id sql injection

Çağlar Arlı      -    28 Views

CVE-2023-6658 | SourceCodester Simple Student Attendance System 1.0 ajax-api.php class_id sql injection

A vulnerability classified as critical was found in SourceCodester Simple Student Attendance System 1.0. This vulnerability affects unknown code of the file ajax-api.php?action=save_attendance. The manipulation of the argument class_id leads to sql injection. This vulnerability was named CVE-2023-6658. The attack needs to be approached within the local network. Furthermore, there is an exploit available.