CVE-2023-48723 in Student Result Management Systemالمعلومات

الملخص

بحسب MITRE • 22/12/2023

Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'rno' parameter of the add_results.php resource does not validate the characters received and they are sent unfiltered to the database.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

مسؤول

Fluid Attacks

حجز

17/11/2023

إفشاء

22/12/2023

الاعتدال

تمت الموافقة

إدخال

VDB-248768

EPSS

0.00000

KEV

لا

النشاطات

منخفض جدًا

المصادر

Do you know our Splunk app?

Download it now for free!