CVE-2023-3008: high-severity vulnerability in ningzichun Student Management System
ningzichun Student Management System login.php sql injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.3epss 0.8%
A vulnerability classified as critical has been found in ningzichun Student Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument user/pass leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-230355.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected products
ningzichun · Student Management SystemRelated CVEs — ningzichun Student Management System
In the same product, most dangerous first.
CVE-2023-3007MEDIUMningzichun Student Management System Password Reset resetPassword.php password recoveryEPSS 1.0%CVE-2026-86672MEDIUMningzichun Student Management System Backup example.7z information disclosureEPSS 0.5%CVE-2026-86673MEDIUMningzichun Student Management System Database Connection database.php mysqli_connect hard-coded credentialsEPSS 0.5%CVE-2026-86674MEDIUMningzichun Student Management System login.php session_start session fixiationEPSS 0.4%