CVE-2023-48722

Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'class_name' parameter of the add_results.php resource does not validate the characters received and they are sent unfiltered to the database.

Score
CVSS 3.1 9.8 Critical
Status
Modified - help@fluidattacks.com
Published
2023-12-21
Last modified
2024-08-02
Weaknesses
CWE-89

Affected products

References

 
 
© AVABIS GmbH privacypolicy about