CVE-2023-2693

A vulnerability was found in SourceCodester Online Exam System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /mahasiswa/data of the component POST Parameter Handler. The manipulation of the argument columns[1][data] leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-228974 is the identifier assigned to this vulnerability.

• CWE-89

• https://github.com/tht1997/CVE_2023/blob/main/Lost%20and%20Found%20Information%20System/img/mahasiswa_data.pngExploit
• https://vuldb.com/?ctiid.228974Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.228974Permissions Required, Third Party Advisory, VDB Entry
• https://github.com/tht1997/CVE_2023/blob/main/Lost%20and%20Found%20Information%20System/img/mahasiswa_data.pngExploit
• https://vuldb.com/?ctiid.228974Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.228974Permissions Required, Third Party Advisory, VDB Entry

Published

May 14, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-26920fast-xml-parser before 4.1.2 allows __proto__ for Prototype …6.5
• CVE-2023-26921OS Command Injection vulnerability in quectel AG550QCN allow…9.8
• CVE-2023-26922SQL injection vulnerability found in Varisicte matrix-gui v.…9.8
• CVE-2023-26923Musescore 3.0 to 4.0.1 has a stack buffer overflow vulnerabi…7
• CVE-2023-26924LLVM a0dab4950 has a segmentation fault in mlir::outlineSing…5.5
• CVE-2023-26925An information disclosure vulnerability exists in the Syslog…7.5
• CVE-2023-26930Buffer Overflow vulnerability found in XPDF v.4.04 allows an…5.5
• CVE-2023-26931Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE…
• CVE-2023-26934Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. Co…
• CVE-2023-26935Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. Co…
• CVE-2023-26936Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. Co…
• CVE-2023-26937Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. Co…