CVE-2023-5011 — Student Information System v1.0 - Multiple Authenticated SQL Injections (SQLi)
Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'coursename' parameter of the marks.php resource does not validate the…
Published: 2023-12-20 · CVSS: 8.8 · CVSS 3.1
Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'coursename' parameter of the marks.php resource does not validate the characters received and they are sent unfiltered to the database.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7