Projectworlds Student Result Management System vulnerabilities

1 known vulnerability affecting projectworlds/student_result_management_system.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2023-48716CRITICALCVSS 9.8v1.02023-12-21

CVE-2023-48716 [CRITICAL] CWE-89 CVE-2023-48716: Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulner Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'class_id' parameter of the add_classes.php resource does not validate the characters received and they are sent unfiltered to the database.