CVE-2023-3007

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in ningzichun Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file resetPassword.php of the component Password Reset Handler. The manipulation of the argument sid leads to weak password recovery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-230354 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-640

Affected software

Vendor	Product	Versions
ningzichun	Student Management System	1.0

References

https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/student-management-system/password_reset.mdBroken Link
https://vuldb.com/?ctiid.230354Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/?id.230354Permissions Required, Third Party Advisory, VDB Entry
https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/student-management-system/password_reset.mdBroken Link
https://vuldb.com/?ctiid.230354Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/?id.230354Permissions Required, Third Party Advisory, VDB Entry

Timeline

Published: May 31, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-300769.8Sourcecodester Judging Management System v1.0 is vulnerable to SQL Injection via /php-jms/print_judges.php?print_judges.php=&se_name=&sub_ev CVE-2023-300779.8Judging Management System v1.0 by oretnom23 was discovered to vulnerable to SQL injection via /php-jms/review_result.php?mainevent_id=, main CVE-2023-30089.8A vulnerability classified as critical has been found in ningzichun Student Management System 1.0. This affects an unknown part of the file CVE-2023-300827.5A denial of service attack might be launched against the server if an unusually lengthy password (more than 10000000 characters) is supplied CVE-2023-300835.5Buffer Overflow vulnerability found in Libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the newVar_N in uti CVE-2023-300845.5An issue found in libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the stackVal function in util/decompile.CVE-2023-300855.5Buffer Overflow vulnerability found in Libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the cws2fws functio CVE-2023-300865.5Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffc CVE-2023-300875.5Buffer Overflow vulnerability found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_mk_string functio CVE-2023-300885.5An issue found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_execute function in mjs.c.CVE-2023-30095.4Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.CVE-2023-300909.8Semcms Shop v4.2 was discovered to contain an arbitrary file uplaod vulnerability via the component SEMCMS_Upfile.php. This vulnerability al