CVE-2023-48722

Summary

CVE-2023-48722: The Student Result Management System version 1.0 contains unauthenticated SQL injection vulnerabilities. The 'class_name' parameter in the add_results.php resource fails to validate user input, allowing malicious characters to be directly sent to the database without filtering, potentially leading to unauthorized access or data manipulation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.