CVE-2023-7156

HIGH

Campcodes Online College Library System 1.0 - SQL Injection via Search Component Index.php Category Parameter

Title source: llm
STIX 2.1

Description

A vulnerability has been found in Campcodes Online College Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file index.php of the component Search. The manipulation of the argument category leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-249178 is the identifier assigned to this vulnerability.

References (3)

Core 3
Core References
Third Party Advisory vdb-entry technical-description
https://vuldb.com/?id.249178
Third Party Advisory signature permissions-required
https://vuldb.com/?ctiid.249178

Scores

CVSS v3 7.3
EPSS 0.0009
EPSS Percentile 25.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Details

CWE
CWE-89
Status published
Products (1)
campcodes/online_college_library_system 1.0
Published Dec 29, 2023
Tracked Since Feb 18, 2026