CVE-2023-46584: SQL Injection
First published: Wed Oct 25 2023(Updated: )
SQL Injection vulnerability in PHPGurukul Nipah virus (NiV) " Testing Management System v.1.0 allows a remote attacker to escalate privileges via a crafted request to the new-user-testing.php endpoint.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2023-46584?
CVE-2023-46584 is a SQL Injection vulnerability in PHPGurukul Nipah Virus (NiV) Testing Management System v.1.0.
How does CVE-2023-46584 affect the PHPGurukul Nipah Virus Testing Management System?
CVE-2023-46584 allows a remote attacker to escalate privileges by exploiting a SQL Injection vulnerability in the new-user-testing.php endpoint of PHPGurukul Nipah Virus Testing Management System v.1.0.
What is the severity of CVE-2023-46584?
CVE-2023-46584 has a severity rating of critical (9.8).
How can I fix the SQL Injection vulnerability in PHPGurukul Nipah Virus Testing Management System?
To fix the SQL Injection vulnerability, apply the latest patch or update provided by PHPGurukul or the vendor.
What is CWE-89?
CWE-89 is a common weakness enumeration identifier for SQL Injection vulnerabilities.
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/severity
- agent/author
- agent/description
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/weakness
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/phpgurukul
- canonical/phpgurukul nipah virus testing management system
- version/phpgurukul nipah virus testing management system/1.0