Sql injection

2022-03-2906:15:00

PRIOn knowledge base

www.prio-n.com

9.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.0%

JSON

A vulnerability was found in SourceCodester College Website Management System 1.0. It has been classified as critical. Affected is the file /cwms/admin/?page=articles/view_article/. The manipulation of the argument id with the input ’ and (select * from(select(sleep(10)))Avx) and ‘abc’ = 'abc with an unknown input leads to sql injection. It is possible to launch the attack remotely and without authentication.

CPENameOperatorVersion
college_website_management_systemeq1.0

CPE	Name	Operator	Version
	college_website_management_system	eq	1.0

References

vuldb.com/?id.194856