CVE-2023-2696

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /matkul/data of the component POST Parameter Handler. The manipulation of the argument columns[1][data] leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-228977 was assigned to this vulnerability.

• CWE-89

• https://github.com/tht1997/CVE_2023/blob/main/Lost%20and%20Found%20Information%20System/img/matkul_data.pngExploit
• https://vuldb.com/?ctiid.228977Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.228977Permissions Required, Third Party Advisory, VDB Entry
• https://github.com/tht1997/CVE_2023/blob/main/Lost%20and%20Found%20Information%20System/img/matkul_data.pngExploit
• https://vuldb.com/?ctiid.228977Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.228977Permissions Required, Third Party Advisory, VDB Entry

Published

May 14, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-26954onekeyadmin v1.3.9 was discovered to contain a stored cross-…5.4
• CVE-2023-26955onekeyadmin v1.3.9 was discovered to contain a stored cross-…5.4
• CVE-2023-26956onekeyadmin v1.3.9 was discovered to contain an arbitrary fi…7.5
• CVE-2023-26957onekeyadmin v1.3.9 was discovered to contain an arbitrary fi…9.1
• CVE-2023-26958Phpgurukul Park Ticketing Management System 1.0 is vulnerabl…4.8
• CVE-2023-26959Phpgurukul Park Ticketing Management System 1.0 is vulnerabl…9.8
• CVE-2023-26961Alteryx Server 2022.1.1.42590 does not employ file type veri…4.8
• CVE-2023-26964An issue was discovered in hyper v0.13.7. h2-0.2.4 Stream st…7.5
• CVE-2023-26965loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has…5.5
• CVE-2023-26966libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode(…5.5
• CVE-2023-26968In Atrocore 1.5.25, the Create Import Feed option with glyph…9.8
• CVE-2023-26969Atropim 1.5.26 is vulnerable to Directory Traversal.7.5