CVE-2023-41522: SQL Injection
Published Aug 7, 2025
·Updated
Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createStudents.php via the Id, firstname, and admissionNumber parameters.
Affected Software
2 affected components
Student Attendance Management System Student Attendance Management System
Student Attendance Management System Project Student Attendance Management System=1.0
Event History
Aug 7, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-41522?
CVE-2023-41522 has a medium severity rating due to its potential for SQL injection attacks.
2
How do I fix CVE-2023-41522?
To fix CVE-2023-41522, sanitize and validate all user inputs in the createStudents.php file to prevent SQL injection.
3
What are the affected parameters in CVE-2023-41522?
The affected parameters in CVE-2023-41522 include Id, firstname, and admissionNumber.
4
Can CVE-2023-41522 lead to data exposure?
Yes, CVE-2023-41522 can lead to unauthorized data exposure through SQL injection.
5
Is CVE-2023-41522 exploitable by unauthenticated users?
Yes, CVE-2023-41522 is exploitable by unauthenticated users if they can access the createStudents.php page.