CVE-2023-6657
published 2023-12-10CVE-2023-6657: A vulnerability classified as critical has been found in SourceCodester Simple Student Attendance System 1.0. This affects an unknown part of the file…
PriorityP351critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.88%
54.7th percentile
A vulnerability classified as critical has been found in SourceCodester Simple Student Attendance System 1.0. This affects an unknown part of the file /modals/student_form.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-247365 was assigned to this vulnerability.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oretnom23 | simple_student_attendance_system | — | — |
| sourcecodester | simple_student_attendance_system | — | — |
| thekelleys | dnsmasq | >= 0 < 2.90-0ubuntu0.16.04.1+esm1 | 2.90-0ubuntu0.16.04.1+esm1 |
| thekelleys | dnsmasq | >= 0 < 2.90-0ubuntu0.18.04.1+esm1 | 2.90-0ubuntu0.18.04.1+esm1 |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.05.2MEDIUMAV:A/AC:L/Au:S/C:P/I:P/A:P
osv7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
dnsmasq vulnerabilities
osv·2024-04-24·CVSS 7.5
CVE-2023-50387 dnsmasq vulnerabilities
dnsmasq vulnerabilities
USN-6657-1 fixed several vulnerabilities in Dnsmasq. This update provides
the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.
Original advisory details:
Elias Heftrig, Haya Schulmann, Niklas Vogel, and Michael Waidner discovered
that Dnsmasq icorrectly handled validating DNSSEC messages. A remote
attacker could possibly use this issue to cause Dnsmasq to consume
resources, leading to a denial of service. (CVE-2023-50387)
It was discovered that Dnsmasq incorrectly handled preparing an NSEC3
closest encloser proof. A remote attacker could possibly use this issue to
cause Dnsmasq to consume resources, leading to a denial of service.
(CVE-2023-50868)
It was discovered that Dnsmasq incorrectly set the maximum EDNS.0 UDP
packet size as required by DNS
GHSA
GHSA-jh9h-qc92-qq5j: A vulnerability classified as critical has been found in SourceCodester Simple Student Attendance System 1
ghsa_unreviewed·2023-12-10
CVE-2023-6657 [MEDIUM] CWE-89 GHSA-jh9h-qc92-qq5j: A vulnerability classified as critical has been found in SourceCodester Simple Student Attendance System 1
A vulnerability classified as critical has been found in SourceCodester Simple Student Attendance System 1.0. This affects an unknown part of the file /modals/student_form.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-247365 was assigned to this vulnerability.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/daydust/vuln/blob/main/Simple_Student_Attendance_System/student_form.php_SQL_injection.mdhttps://vuldb.com/?ctiid.247365https://vuldb.com/?id.247365https://github.com/daydust/vuln/blob/main/Simple_Student_Attendance_System/student_form.php_SQL_injection.mdhttps://vuldb.com/?ctiid.247365https://vuldb.com/?id.247365
2023-12-10
Published