A vulnerability, which was classified as critical, was found in SourceCodester Student Attendance System 1.0. Affected is an unknown function of the file attendance_report.php. The manipulation of the argument class_id leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-250230 is the identifier assigned to this vulnerability.
CVSS
No CVSS.
References
Configurations
No configuration.
Information
Published : 2024-01-10 14:15
Updated : 2024-01-10 16:59
NVD link : CVE-2024-0389
Mitre link : CVE-2024-0389
JSON object : View
Products Affected
No product.
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
