CVE-2023-51801: SQL Injection
Published Feb 29, 2024
·Updated
SQL Injection vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the id parameter in the studentform.php and the classform.php pages.
Affected Software
1 affected component
oretnom23 Simple Student Attendance System=1.0
Event History
Feb 29, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-51801?
CVE-2023-51801 has a high severity rating due to its potential for remote code execution via SQL injection.
2
How do I fix CVE-2023-51801?
To fix CVE-2023-51801, you should validate and sanitize all user inputs, particularly in the id parameter of student_form.php and class_form.php.
3
Which software versions are affected by CVE-2023-51801?
CVE-2023-51801 affects Simple Student Attendance System version 1.0.
4
Can CVE-2023-51801 be exploited remotely?
Yes, CVE-2023-51801 can be exploited remotely by attackers through crafted payloads.
5
What type of vulnerability is CVE-2023-51801?
CVE-2023-51801 is classified as an SQL Injection vulnerability, allowing execution of arbitrary code.