What is CVE-2019-18344?

CVE-2019-18344 is a critical-severity vulnerability in Online Grading System Project, classified under SQL Injection. CVSS score: 9.8/10. Published 2019-10-23.

How severe is CVE-2019-18344?

Critical severity. CVSS v3 base score is 9.8 out of 10.

SQL Injection in Online Grading System Project

CVE-2019-18344

Sourcecodester Online Grading System 1.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the student, instructor, department, room, class, or user page (id or classid parameter).

Vulnerability class: SQL Injection

EPSS: 0.014 (68.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Online_grading_system_project Online_grading_system — versions 1.0
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2019-18344?: CVE-2019-18344 is a critical-severity vulnerability in Online Grading System Project, classified under SQL Injection. CVSS score: 9.8/10. Published 2019-10-23.
How severe is CVE-2019-18344?: Critical severity. CVSS v3 base score is 9.8 out of 10.