CVE-2023-3008
Last modified
CVE-2023-3008 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. A vulnerability classified as critical has been found in ningzichun Student Management System 1.0. This affects an unknown part of the file login.php. EPSS estimates a 0.80% chance of exploitation in the next 30 days.
Description
A vulnerability classified as critical has been found in ningzichun Student Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument user/pass leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-230355.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Kabir-M-Alhasan | Student Management System | 1.0 |
References
- https://vuldb.com/?ctiid.230355Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.230355Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?ctiid.230355Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.230355Permissions Required, Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-3008?
How severe is CVE-2023-3008?
How do I fix CVE-2023-3008?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-30065MitraStar GPT-2741GNAC-N2 with firmware BR_g5.9_1.11(WVK.0)b…8.8
- CVE-2023-3007A vulnerability was found in ningzichun Student Management S…9.8
- CVE-2023-30076Sourcecodester Judging Management System v1.0 is vulnerable …9.8
- CVE-2023-30077Judging Management System v1.0 by oretnom23 was discovered t…9.8
- CVE-2023-30078Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE…
- CVE-2023-30079Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE…
- CVE-2023-30082A denial of service attack might be launched against the ser…7.5
- CVE-2023-30083Buffer Overflow vulnerability found in Libming swftophp v.0.…5.5
- CVE-2023-30084An issue found in libming swftophp v.0.4.8 allows a local at…5.5
- CVE-2023-30085Buffer Overflow vulnerability found in Libming swftophp v.0.…5.5
- CVE-2023-30086Buffer Overflow vulnerability found in Libtiff V.4.0.7 allow…5.5
- CVE-2023-30087Buffer Overflow vulnerability found in Cesanta MJS v.1.26 al…5.5
Are you affected by CVE-2023-3008?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
