Student Information System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the 'regno' parameter of index.php page, allowing an external attacker to dump all the contents of the database contents and bypass the login control.
References
| Link | Resource |
|---|---|
| https://fluidattacks.com/advisories/blechacz/ | Exploit Third Party Advisory |
| https://www.kashipara.com/ | Product |
| https://fluidattacks.com/advisories/blechacz/ | Exploit Third Party Advisory |
| https://www.kashipara.com/ | Product |
Configurations
History
21 Nov 2024, 08:40
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://fluidattacks.com/advisories/blechacz/ - Exploit, Third Party Advisory | |
| References | () https://www.kashipara.com/ - Product |
11 Dec 2023, 17:47
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Imsurajghosh
Imsurajghosh student Information System |
|
| CPE | cpe:2.3:a:imsurajghosh:student_information_system:1.0:*:*:*:*:*:*:* | |
| References | () https://www.kashipara.com/ - Product | |
| References | () https://fluidattacks.com/advisories/blechacz/ - Exploit, Third Party Advisory |
08 Dec 2023, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-08 00:15
Updated : 2024-11-21 08:40
NVD link : CVE-2023-5008
Mitre link : CVE-2023-5008
CVE.ORG link : CVE-2023-5008
JSON object : View
Products Affected
imsurajghosh
- student_information_system
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')