CVE-2023-6618
Published: 08 December 2023
Summary
CVE-2023-6618 is a medium-severity External Control of File Name or Path (CWE-73) vulnerability in Oretnom23 Simple Student Attendance System. Its CVSS base score is 5.5 (Medium).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 22.8th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-58841
Vulnerability details
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The…
more
exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-247255.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
The CVE describes a file inclusion vulnerability (CWE-73) in the public-facing web application index.php via manipulation of the 'page' parameter, enabling remote exploitation of a public-facing application.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.