CVE-2023-3008: fallo de gravedad alta en ningzichun Student Management System
ningzichun Student Management System login.php sql injection
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.3epss 0.8%
A vulnerability classified as critical has been found in ningzichun Student Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument user/pass leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-230355.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Productos afectados
ningzichun · Student Management SystemCVEs relacionadas — ningzichun Student Management System
En el mismo producto, de las más peligrosas a las menos.
CVE-2023-3007MEDIUMningzichun Student Management System Password Reset resetPassword.php password recoveryEPSS 1.0%CVE-2026-86672MEDIUMningzichun Student Management System Backup example.7z information disclosureEPSS 0.5%CVE-2026-86673MEDIUMningzichun Student Management System Database Connection database.php mysqli_connect hard-coded credentialsEPSS 0.5%CVE-2026-86674MEDIUMningzichun Student Management System login.php session_start session fixiationEPSS 0.4%