CVE-2023-3339

A vulnerability has been found in code-projects Agro-School Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file exam-delete.php. The manipulation of the argument test_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-232015.

• CWE-89

• https://github.com/6rignard/CveReport/blob/main/Agro-School%20Management%20System%20exam-delete.php%20has%20Sqlinjection.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.232015Third Party Advisory
• https://vuldb.com/?id.232015Third Party Advisory
• https://github.com/6rignard/CveReport/blob/main/Agro-School%20Management%20System%20exam-delete.php%20has%20Sqlinjection.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.232015Third Party Advisory
• https://vuldb.com/?id.232015Third Party Advisory

Published

Jun 21, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-33379Connected IO v2.1.0 and prior has a misconfiguration in thei…9.8
• CVE-2023-3338A null pointer dereference flaw was found in the Linux kerne…6.5
• CVE-2023-33381A command injection vulnerability was found in the ping func…7.2
• CVE-2023-33383Shelly 4PM Pro four-channel smart switch 0.11.0 allows an at…5.3
• CVE-2023-33386MarsCTF 1.2.1 has an arbitrary file upload vulnerability in …9.8
• CVE-2023-33387A reflected cross-site scripting (XSS) vulnerability in DATE…6.1
• CVE-2023-33394skycaiji v2.5.4 is vulnerable to Cross Site Scripting (XSS).…5.4
• CVE-2023-3340A vulnerability was found in SourceCodester Online School Fe…9.8
• CVE-2023-33404An Unrestricted Upload vulnerability, due to insufficient va…9.8
• CVE-2023-33405Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Red…6.1
• CVE-2023-33408Minical 1.0.0 is vulnerable to Cross Site Scripting (XSS). T…5.4
• CVE-2023-33409Minical 1.0.0 is vulnerable to Cross Site Request Forgery (C…6.5