CVE-2023-33584

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Enrollment System Project v1.0 - SQL Injection Authentication Bypass (SQLI)2023-06-04 · webapps · php · Verified

Impact

Sourcecodester Enrollment System Project V1.0 is vulnerable to SQL Injection (SQLI) attacks, which allow an attacker to manipulate the SQL queries executed by the application. The application fails to properly validate user-supplied input in the username and password fields during the login process, enabling an attacker to inject malicious SQL code.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://packetstormsecurity.com/files/172718/Enrollment-System-Project-1.0-Authentication-Bypass-SQL-Injection.html
• https://github.com/sudovivek/My-CVE/blob/main/CVE-2023-33584_exploit.md
• https://packetstormsecurity.com/files/cve/CVE-2023-33584
• https://www.exploit-db.com/exploits/51501
• https://www.sourcecodester.com/php/14444/enrollment-system-project-source-code-using-phpmysql.html
• http://packetstormsecurity.com/files/172718/Enrollment-System-Project-1.0-Authentication-Bypass-SQL-Injection.html
• https://github.com/sudovivek/My-CVE/blob/main/CVE-2023-33584_exploit.md
• https://packetstormsecurity.com/files/cve/CVE-2023-33584
• https://www.exploit-db.com/exploits/51501
• https://www.sourcecodester.com/php/14444/enrollment-system-project-source-code-using-phpmysql.html