A vulnerability was found in ningzichun Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file resetPassword.php of the component Password Reset Handler. The manipulation of the argument sid leads to weak password recovery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-230354 is the identifier assigned to this vulnerability.
References
| Link | Resource |
|---|---|
| https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/student-management-system/password_reset.md | Broken Link |
| https://vuldb.com/?ctiid.230354 | Permissions Required Third Party Advisory VDB Entry |
| https://vuldb.com/?id.230354 | Permissions Required Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
06 Jun 2023, 16:33
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| First Time |
Student Management System Project student Management System
Student Management System Project |
|
| CPE | cpe:2.3:a:student_management_system_project:student_management_system:1.0:*:*:*:*:*:*:* | |
| References | (MISC) https://vuldb.com/?ctiid.230354 - Permissions Required, Third Party Advisory, VDB Entry | |
| References | (MISC) https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/student-management-system/password_reset.md - Broken Link | |
| References | (MISC) https://vuldb.com/?id.230354 - Permissions Required, Third Party Advisory, VDB Entry |
31 May 2023, 13:02
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-05-31 12:15
Updated : 2024-05-17 02:27
NVD link : CVE-2023-3007
Mitre link : CVE-2023-3007
CVE.ORG link : CVE-2023-3007
JSON object : View
Products Affected
student_management_system_project
- student_management_system
CWE
CWE-640
Weak Password Recovery Mechanism for Forgotten Password