{"id":"CVE-2019-18344","aliases":["EUVD-2019-8132","GHSA-wmfq-q8mr-jj25"],"status":"published","title":"Sourcecodester Online Grading System 1.0 is vulnerable to unauthenticated SQL injection and can...","description":"Sourcecodester Online Grading System 1.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the student, instructor, department, room, class, or user page (id or classid parameter).","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0136,"percentile":0.71918,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2019-10-23T14:36:36Z","modified":"2026-06-17T02:24:52Z","products":[{"vendor":"online_grading_system_project","product":"online_grading_system"}],"references":[{"url":"https://www.sevenlayers.com/index.php/262-online-grading-system-1-0-sqli","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-18344"},{"url":"https://github.com/advisories/GHSA-wmfq-q8mr-jj25"}],"sources":{"cve":[{"id":"CVE-2019-18344","description":"Sourcecodester Online Grading System 1.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the student, instructor, department, room, class, or user page (id or classid parameter).","status":"published","published":"2019-10-23T14:36:36Z","modified":"2024-08-05T01:54:13.306Z","updated_at":"2026-11-02T14:32:23.803059Z"}],"euvd":[{"id":"EUVD-2019-8132","description":"Sourcecodester Online Grading System 1.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the student, instructor, department, room, class, or user page (id or classid parameter).","status":"published","published":"2019-10-23T14:36:36Z","modified":"2024-08-05T01:54:13Z","updated_at":"2026-11-03T02:40:28.293703Z"}],"ghsa":[{"id":"GHSA-wmfq-q8mr-jj25","title":"Sourcecodester Online Grading System 1.0 is vulnerable to unauthenticated SQL injection and can...","description":"Sourcecodester Online Grading System 1.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the student, instructor, department, room, class, or user page (id or classid parameter).","status":"published","published":"2022-05-24T16:59:39Z","modified":"2024-04-04T02:32:55Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:56:08.751002Z"}],"nvd":[{"id":"CVE-2019-18344","description":"Sourcecodester Online Grading System 1.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the student, instructor, department, room, class, or user page (id or classid parameter).","status":"published","published":"2019-10-23T15:15:14.39Z","modified":"2026-06-17T02:24:52.513Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:05:32.982925Z"}]}}