CVE-2023-2152 MEDIUM

CVE-2023-2152: SourceCodester Student Study Center Desk Management System index.php file inclusion

Vendor Sourcecodester
Product Student Study Center Desk Management System
Weakness CWE-73
Published April 18, 2023
Last update August 2, 2024

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

A vulnerability has been found in SourceCodester Student Study Center Desk Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-226273 was assigned to this vulnerability.

Key dates

02Disclosure timeline

April 18, 2023 CVE published
August 2, 2024 Record updated