Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'coursename' parameter of the marks.php resource does not validate the characters received and they are sent unfiltered to the database.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: Fluid Attacks

Published: 2023-12-20T15:57:19.012Z

Updated: 2024-08-02T07:44:53.684Z

Reserved: 2023-09-15T22:56:03.585Z

Link: CVE-2023-5011

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-12-20T16:15:10.400

Modified: 2024-11-21T08:40:53.083

Link: CVE-2023-5011

cve-icon Redhat

No data.