CVE-2023-1308

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical has been found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/adminlog.php. The manipulation of the argument user leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222696.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
SourceCodesterOnline Graduate Tracer System1.0

References

Timeline

Published
Mar 10, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-13099.8A vulnerability classified as critical was found in SourceCodester Online Graduate Tracer System 1.0. Affected by this vulnerability is an uCVE-2023-13109.8A vulnerability, which was classified as critical, has been found in SourceCodester Online Graduate Tracer System 1.0. Affected by this issuCVE-2023-13119.8A vulnerability, which was classified as critical, was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. This aCVE-2023-13124.8Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19.CVE-2023-13138.8Unrestricted Upload of File with Dangerous Type in GitHub repository cockpit-hq/cockpit prior to 2.4.1.CVE-2023-13147.8A vulnerability has been discovered in cloudflared's installer (<= 2023.3.0) for Windows 32-bits devices that allows a local attacker with nCVE-2023-13155.4Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6.CVE-2023-13165.4Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.CVE-2023-13175.4Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6.CVE-2023-13185.4Cross-site Scripting (XSS) - Generic in GitHub repository osticket/osticket prior to v1.16.6.CVE-2023-13194.8Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.CVE-2023-13206.1Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.