CVE-2023-2152

A vulnerability has been found in SourceCodester Student Study Center Desk Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-226273 was assigned to this vulnerability.
References
Link Resource
https://github.com/xzz0787/vul/blob/main/README.pdf Exploit Third Party Advisory
https://vuldb.com/?ctiid.226273 Permissions Required Third Party Advisory
https://vuldb.com/?id.226273 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:student_study_center_desk_management_system_project:student_study_center_desk_management_system:1.0:*:*:*:*:*:*:*

History

26 Apr 2023, 13:25

Type Values Removed Values Added
CWE CWE-73 CWE-610
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.8
First Time Student Study Center Desk Management System Project student Study Center Desk Management System
Student Study Center Desk Management System Project
CPE cpe:2.3:a:student_study_center_desk_management_system_project:student_study_center_desk_management_system:1.0:*:*:*:*:*:*:*
References (MISC) https://github.com/xzz0787/vul/blob/main/README.pdf - (MISC) https://github.com/xzz0787/vul/blob/main/README.pdf - Exploit, Third Party Advisory
References (MISC) https://vuldb.com/?id.226273 - (MISC) https://vuldb.com/?id.226273 - Third Party Advisory
References (MISC) https://vuldb.com/?ctiid.226273 - (MISC) https://vuldb.com/?ctiid.226273 - Permissions Required, Third Party Advisory

18 Apr 2023, 17:36

Type Values Removed Values Added
New CVE

Information

Published : 2023-04-18 14:15

Updated : 2024-04-11 01:19


NVD link : CVE-2023-2152

Mitre link : CVE-2023-2152

CVE.ORG link : CVE-2023-2152


JSON object : View

Products Affected

student_study_center_desk_management_system_project

  • student_study_center_desk_management_system
CWE
CWE-610

Externally Controlled Reference to a Resource in Another Sphere

CWE-73

External Control of File Name or Path