3 matches found
EUVD-2023-52752
Malicious code in bioql PyPI...
9.8CVSS9.2AI score0.00671EPSS
SaveExploits1References2
CVE-2023-48718
The CVE-2023-48718 entry affects Student Result Management System v1.0, with unauthenticated SQL Injection via the add_students.php resource where the class_name parameter is not validated before sending to the database. Root cause: unsanitized user input reaching SQL queries. Impact: high (per C...
9.8CVSS10AI score0.00671EPSS
SaveExploits1References2Affected Software1
CVE-2023-48718: Improper Neutralization of Special Elements used in an SQL Command
Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'classname' parameter of the addstudents.php resource does not validate the characters received and they are sent unfiltered to the database...
9.8CVSS8.2AI score0.00671EPSS
SaveExploits1References2
20