CVE-2023-2152

A vulnerability has been found in SourceCodester Student Study Center Desk Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-226273 was assigned to this vulnerability.

• CWE-73
• CWE-610

• https://github.com/xzz0787/vul/blob/main/README.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.226273Permissions Required, Third Party Advisory
• https://vuldb.com/?id.226273Third Party Advisory
• https://github.com/xzz0787/vul/blob/main/README.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.226273Permissions Required, Third Party Advisory
• https://vuldb.com/?id.226273Third Party Advisory

Published

Apr 18, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-21513Improper privilege management vulnerability in CC Mode prior…6.8
• CVE-2023-21514Improper scheme validation from InstantPlay Deeplink in Gala…8.8
• CVE-2023-21515InstantPlay which included vulnerable script which could exe…8.8
• CVE-2023-21516XSS vulnerability from InstantPlay in Galaxy Store prior to …9.6
• CVE-2023-21517Heap out-of-bound write vulnerability in Exynos baseband pri…9.8
• CVE-2023-21518Improper access control vulnerability in SearchWidget prior …7.8
• CVE-2023-21520 A PII Enumeration via Credential Reco…5.3
• CVE-2023-21521 An SQL Injection vulnerability in the Management Console  (…7.2
• CVE-2023-21522 A Reflected Cross-site Scripting (XSS) vulnerability in the…6.1
• CVE-2023-21523 A Stored Cross-site Scripting (XSS) v…5.4
• CVE-2023-21524Windows Local Security Authority (LSA) Elevation of Privileg…7.8
• CVE-2023-21525Remote Procedure Call Runtime Denial of Service Vulnerabilit…5.3