CVE-2023-5011
Student Information System v1.0 - Multiple Authenticated SQL Injections (SQLi)
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 8.8EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
20 Dec 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'coursename' parameter of the marks.php resource does not validate the characters received and they are sent unfiltered to the database.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Kashipara Group · Student Information SystemWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →