CVE-2023-2146

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in Campcodes Online Thesis Archiving System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file classes/Master.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-226267.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
CampcodesOnline Thesis Archiving System1.0

References

Timeline

Published
Apr 18, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-214604.4Improper authentication in SecSettings prior to SMR Mar-2023 Release 1 allows attacker to reset the setting.CVE-2023-214615.5Improper authorization vulnerability in AutoPowerOnOffConfirmDialog in Settings prior to SMR Mar-2023 Release 1 allows local attacker to turCVE-2023-214623.3The sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13 CVE-2023-214633.3Improper access control vulnerability in MyFiles application prior to versions 12.2.09.0 in Android 11, 13.1.03.501 in Android 12 and 14.1.0CVE-2023-214643.3Improper access control in Samsung Calendar prior to versions 12.4.02.9000 in Android 13 and 12.3.08.2000 in Android 12 allows local attackeCVE-2023-214655.5Improper access control vulnerability in BixbyTouch prior to version 3.2.02.5 in China models allows untrusted applications access local filCVE-2023-214663.3PendingIntent hijacking vulnerability in CertificatePolicy in framework prior to SMR Apr-2023 Release 1 allows local attackers to access conCVE-2023-214679.8Error in 3GPP specification implementation in Exynos baseband prior to SMR Apr-2023 Release 1 allows incorrect handling of unencrypted messaCVE-2023-214687.8Improper access control vulnerability in Telephony prior to SMR Apr-2023 Release 1 allows attackers to access files with escalated permissioCVE-2023-214693.3Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device location informationCVE-2023-21479.8A vulnerability was found in Campcodes Online Thesis Archiving System 1.0. It has been rated as critical. Affected by this issue is some unkCVE-2023-214703.3Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device location information
CVE-2023-2146: Critical severity, CVSS 9.8 | Vulnix