CVE-2023-48720

published 2023-12-21

CVE-2023-48720: Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the login.php…

Priority P3 49 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
phpgurukul	student_result_management_system	—	—
projectworlds_pvt_limited	student_result_management_system	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-89