← CVE Intelligence

CVE-2023-5011

Student Information System v1.0 - Multiple Authenticated SQL Injections (SQLi) PUBLISHED

Description (CNA)

Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'coursename' parameter of the marks.php resource does not validate the characters received and they are sent unfiltered to the database.

Affected (CNA)

Vendor / productVersions
Kashipara Group / Student Information Systemaffected 1.0

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.