CVE-2023-46025

Summary

CVE-2023-46025 is a SQL injection vulnerability that affects the teacher-info.php file in the phpgurukul Teacher Subject Allocation Management System version 1.0. This defect permits attackers to gain unauthorized access to sensitive information by manipulating the 'editid' parameter in SQL queries. Successful exploitation of this vulnerability could lead to the exposure of confidential data, posing a significant risk to system security. It is crucial for users to update their systems to a secure version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.