CVE-2023-48718: Student Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'classname' parameter of the addstudents.php resource does not validate the characters received and they are sent unfiltered to the database.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-48718?
The severity of CVE-2023-48718 is high due to multiple unauthenticated SQL Injection vulnerabilities.
How do I fix CVE-2023-48718?
To fix CVE-2023-48718, validate and sanitize user inputs for the 'class_name' parameter in the add_students.php file.
Who is affected by CVE-2023-48718?
CVE-2023-48718 affects users of the Student Result Management System version 1.0.
What is the impact of CVE-2023-48718 on system security?
CVE-2023-48718 can allow an attacker to execute arbitrary SQL commands, leading to data leakage or manipulation.
Is there a patch available for CVE-2023-48718?
Currently, there is no official patch available for CVE-2023-48718, so users must implement input validation as a workaround.