CVE-2023-4122

CVE-2023-4122 affects Student Information System v1.0, with an Insecure File Upload vulnerability on the photo parameter of the my-profile page. The underlying issue allows an authenticated attacker to achieve Remote Code Execution on the server hosting the application. Evidence from multiple con...

CVE-2023-5008

CVE-2023-5008 affects the Student Information System v1.0. The unauthenticated SQL injection flaw is in the regno parameter of index.php, allowing an external attacker to dump all database contents and bypass login. CVSS v3.1: 9.8 (Network, Low attack complexity, No privileges, No user interactio...