Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database.
References
| Link | Resource |
|---|---|
| https://fluidattacks.com/advisories/gilels/ | Exploit Third Party Advisory |
| https://projectworlds.in/ | Product |
Configurations
History
29 Dec 2023, 15:30
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://projectworlds.in/ - Product | |
| References | () https://fluidattacks.com/advisories/gilels/ - Exploit, Third Party Advisory | |
| First Time |
Phpgurukul
Phpgurukul student Result Management System |
|
| CPE | cpe:2.3:a:phpgurukul:student_result_management_system:1.0:*:*:*:*:*:*:* |
21 Dec 2023, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-21 21:15
Updated : 2023-12-29 15:30
NVD link : CVE-2023-48720
Mitre link : CVE-2023-48720
JSON object : View
Products Affected
phpgurukul
- student_result_management_system
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')