CVE-2023-30246

SQL injection vulnerability found in Judging Management System v.1.0 allows a remote attacker to execute arbitrary code via the contestantid parameter...

CVE-2023-30246

CVE-2023-30246 affects Judging Management System v1.0. The issue is a SQL injection via the contestant_id parameter, enabling a remote attacker to execute arbitrary code. The CVSS v3.1 vector from sources indicates a CRITICAL base score (9.8) with NETWORK attack vector, LOW attack complexity, and...