CVE-2023-1309

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical was found in SourceCodester Online Graduate Tracer System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/search_it.php. The manipulation of the argument input leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222697 was assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
SourceCodester	Online Graduate Tracer System	1.0

References

https://github.com/gtest1112/111/blob/main/sqli-2.mdExploit
https://vuldb.com/?ctiid.222697Third Party Advisory
https://vuldb.com/?id.222697Third Party Advisory
https://github.com/gtest1112/111/blob/main/sqli-2.mdExploit
https://vuldb.com/?ctiid.222697Third Party Advisory
https://vuldb.com/?id.222697Third Party Advisory

Timeline

Published: Mar 10, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-13109.8A vulnerability, which was classified as critical, has been found in SourceCodester Online Graduate Tracer System 1.0. Affected by this issu CVE-2023-13119.8A vulnerability, which was classified as critical, was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. This a CVE-2023-13124.8Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19.CVE-2023-13138.8Unrestricted Upload of File with Dangerous Type in GitHub repository cockpit-hq/cockpit prior to 2.4.1.CVE-2023-13147.8A vulnerability has been discovered in cloudflared's installer (<= 2023.3.0) for Windows 32-bits devices that allows a local attacker with n CVE-2023-13155.4Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6.CVE-2023-13165.4Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.CVE-2023-13175.4Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6.CVE-2023-13185.4Cross-site Scripting (XSS) - Generic in GitHub repository osticket/osticket prior to v1.16.6.CVE-2023-13194.8Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.CVE-2023-13206.1Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.CVE-2023-13219.8A vulnerability has been found in lmxcms 1.41 and classified as critical. Affected by this vulnerability is the function update of the file