CVE-2023-2146

A vulnerability was found in Campcodes Online Thesis Archiving System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file classes/Master.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-226267.

• CWE-89

• https://github.com/E1CHO/cve_hub/blob/main/Online%20Thesis%20Archiving%20System/Online%20Thesis%20Archiving%20System%20-%20vuln%203.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.226267Permissions Required, Third Party Advisory
• https://vuldb.com/?id.226267Third Party Advisory
• https://github.com/E1CHO/cve_hub/blob/main/Online%20Thesis%20Archiving%20System/Online%20Thesis%20Archiving%20System%20-%20vuln%203.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.226267Permissions Required, Third Party Advisory
• https://vuldb.com/?id.226267Third Party Advisory

Published

Apr 18, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-21454Improper authorization in Samsung Keyboard prior to SMR Mar-…2.4
• CVE-2023-21455Improper authorization implementation in Exynos baseband pri…9.1
• CVE-2023-21456Path traversal vulnerability in Galaxy Themes Service prior …5.5
• CVE-2023-21457Improper access control vulnerability in Bluetooth prior to …8.1
• CVE-2023-21458Improper privilege management vulnerability in PhoneStatusBa…3.3
• CVE-2023-21459Use after free vulnerability in decon driver prior to SMR Ma…9.8
• CVE-2023-21460Improper authentication in SecSettings prior to SMR Mar-2023…4.4
• CVE-2023-21461Improper authorization vulnerability in AutoPowerOnOffConfir…5.5
• CVE-2023-21462The sensitive information exposure vulnerability in Quick Sh…3.3
• CVE-2023-21463Improper access control vulnerability in MyFiles application…3.3
• CVE-2023-21464Improper access control in Samsung Calendar prior to version…3.3
• CVE-2023-21465Improper access control vulnerability in BixbyTouch prior to…5.5