Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-48485
HistoryMay 19, 2023 - 12:00 a.m.

Judging Management System SQL Injection Vulnerability (CNVD-2023-48485)

2023-05-1900:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
sql injection
judging management system
vulnerability
version v.1.0
crit_id parameter
edit_criteria.php
filter validation
user input
attack target

EPSS

0.002

Percentile

56.5%

Judging Management System is a judging management system. Judging Management System has a SQL injection vulnerability in version v.1.0. The vulnerability is related to the crit_id parameter of the edit_criteria.php file, and is due to the program not performing strict filter validation of user input. An attacker can exploit this vulnerability to launch a SQL injection attack against the target.

EPSS

0.002

Percentile

56.5%

Related for CNVD-2023-48485