Sql injection

2023-12-0800:15:00

PRIOn knowledge base

www.prio-n.com

sql injection

student infosys

vulnerability

database

nvd

8.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

33.1%

JSON

Student Information System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the ‘regno’ parameter of index.php page, allowing an external attacker to dump all the contents of the database contents and bypass the login control.

CPENameOperatorVersion
student_information_systemeq1.0

CPE	Name	Operator	Version
	student_information_system	eq	1.0

References

fluidattacks.com/advisories/blechacz/

www.kashipara.com/