CVE-2023-48722: Student Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'classname' parameter of the addresults.php resource does not validate the characters received and they are sent unfiltered to the database.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-48722?
CVE-2023-48722 is classified as a high severity vulnerability due to its potential for significant impact through SQL Injection.
How do I fix CVE-2023-48722?
To fix CVE-2023-48722, validate and sanitize all inputs, particularly the 'class_name' parameter, before sending them to the database.
What systems are affected by CVE-2023-48722?
CVE-2023-48722 affects Student Result Management System version 1.0 developed by Phpgurukul.
What type of vulnerability is CVE-2023-48722?
CVE-2023-48722 is an Unauthenticated SQL Injection vulnerability that allows attackers to execute arbitrary SQL code.
Can CVE-2023-48722 be exploited remotely?
Yes, CVE-2023-48722 can be exploited remotely, allowing attackers to manipulate database queries without authentication.