CVE-2023-48720

published 2023-12-21

CVE-2023-48720: Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the login.php…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
phpgurukul	student_result_management_system	—	—
projectworlds_pvt_limited	student_result_management_system	—	—

CWE-89