Vulnerability · Published Mar 17, 2023 · Assigned by VulDB

CVE-2023-1467SourceCodester Student Study Center Desk Management System POST Parameter path traversal

Medium 6.5

In plain English

A medium-severity path traversal in Student Study Center Desk Management System from SourceCodester. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 65% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)1.1%top 34.7% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

A vulnerability classified as critical has been found in SourceCodester Student Study Center Desk Management System 1.0. Affected is an unknown function of the file Master.php?f=delete_img of the component POST Parameter Handler. The manipulation of the argument path with the input C%3A%2Ffoo.txt leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-223326 is the identifier assigned to this vulnerability.

Affected products (as reported)

Vendor	Product	Versions
SourceCodester	Student Study Center Desk Management System	1.0

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

References

https://vuldb.com/?id.223326 vdb-entry, technical-description
https://vuldb.com/?ctiid.223326 signature