CVE-2023-2696

CRITICAL 9.8CVE-2023-2696 · Published 14/05/2023 · updated 17/06/2026

In short

CVE-2023-2696 is a CRITICAL (CVSS 9.8) vulnerability affecting online exam system (online exam system project).
Chance of exploitation in the next 30 days (EPSS): 0.82%, higher than 57.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
online exam system online_exam_system_project	`= 1.0`	No fix yet

Description

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /matkul/data of the component POST Parameter Handler. The manipulation of the argument columns[1][data] leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-228977 was assigned to this vulnerability.

References

tht1997/CVE_2023 · Exploit
vuldb.com · Permissions Required
vuldb.com · Permissions Required

More vulnerabilities in online exam system

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

online exam system

online_exam_system_project

= 1.0

No fix yet

Description

More vulnerabilities in online exam system

See all →