CVE-2023-41523: SQL Injection

Published Aug 7, 2025

Updated

Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the emailAddress parameter at createClassTeacher.php.

Affected Software

2 affected components

Unknown Student Attendance Management System

Student Attendance Management System Project Student Attendance Management System=1.0

Event History

Aug 7, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-41523?

CVE-2023-41523 has been classified as a critical severity vulnerability due to its potential for SQL injection exploitation.

How do I fix CVE-2023-41523?

To fix CVE-2023-41523, sanitize and validate the input data for the emailAddress parameter and use prepared statements for database queries.

What systems are affected by CVE-2023-41523?

CVE-2023-41523 affects the Student Attendance Management System version 1.

Can CVE-2023-41523 lead to data leakage?

Yes, the SQL injection vulnerability in CVE-2023-41523 can lead to unauthorized access and potential data leakage from the database.

What kind of attack can be performed using CVE-2023-41523?

An attacker can exploit CVE-2023-41523 to execute arbitrary SQL commands, which may allow them to manipulate or retrieve sensitive data from the database.