{"id":"CVE-2023-6771","aliases":["EUVD-2023-58983","GHSA-qc9q-8cwr-cgv7"],"status":"published","title":"SourceCodester Simple Student Attendance System actions.class.php save_attendance sql injection","description":"A vulnerability, which was classified as critical, has been found in SourceCodester Simple Student Attendance System 1.0. This issue affects the function save_attendance of the file actions.class.php. The manipulation of the argument sid leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-247907.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00604,"percentile":0.49188,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2023-12-13T18:31:03Z","modified":"2026-06-17T06:51:23Z","products":[{"vendor":"oretnom23","product":"simple_student_attendance_system"},{"vendor":"sourcecodester","product":"simple student attendance system"}],"references":[{"url":"https://vuldb.com/?id.247907","tags":["vdb-entry","technical-description","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://vuldb.com/?ctiid.247907","tags":["signature","permissions-required","x_transferred","Permissions Required","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/Glunko/Simple-Student-Attendance-System_vulnerability/blob/main/README.md","tags":["exploit","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6771"},{"url":"https://github.com/advisories/GHSA-qc9q-8cwr-cgv7"}],"sources":{"cve":[{"id":"CVE-2023-6771","title":"SourceCodester Simple Student Attendance System actions.class.php save_attendance sql injection","description":"A vulnerability, which was classified as critical, has been found in SourceCodester Simple Student Attendance System 1.0. This issue affects the function save_attendance of the file actions.class.php. The manipulation of the argument sid leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-247907.","status":"published","published":"2023-12-13T18:31:03.593Z","modified":"2024-08-28T14:29:16.939Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"},{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"},{"version":"2.0","score":5.2,"vector":"AV:A/AC:L/Au:S/C:P/I:P/A:P","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:35:25.469654Z"}],"euvd":[{"id":"EUVD-2023-58983","description":"A vulnerability, which was classified as critical, has been found in SourceCodester Simple Student Attendance System 1.0. This issue affects the function save_attendance of the file actions.class.php. The manipulation of the argument sid leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-247907.","status":"published","published":"2023-12-13T18:31:03Z","modified":"2024-08-28T14:29:16Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T00:56:09.376102Z"}],"ghsa":[{"id":"GHSA-qc9q-8cwr-cgv7","title":"A vulnerability, which was classified as critical, has been found in SourceCodester Simple...","description":"A vulnerability, which was classified as critical, has been found in SourceCodester Simple Student Attendance System 1.0. This issue affects the function save_attendance of the file actions.class.php. The manipulation of the argument sid leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-247907.","status":"published","published":"2023-12-13T21:30:30Z","modified":"2023-12-13T21:30:35Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:55:11.957073Z"}],"nvd":[{"id":"CVE-2023-6771","description":"A vulnerability, which was classified as critical, has been found in SourceCodester Simple Student Attendance System 1.0. This issue affects the function save_attendance of the file actions.class.php. The manipulation of the argument sid leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-247907.","status":"published","published":"2023-12-13T19:15:08.257Z","modified":"2026-06-17T06:51:23.523Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":5.2,"vector":"AV:A/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"secondary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:08:54.696438Z"}]}}