CVE-2023-30077

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Judging Management System v1.0 by oretnom23 was discovered to vulnerable to SQL injection via /php-jms/review_result.php?mainevent_id=, mainevent_id.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
May 4, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-30089.8A vulnerability classified as critical has been found in ningzichun Student Management System 1.0. This affects an unknown part of the file CVE-2023-300827.5A denial of service attack might be launched against the server if an unusually lengthy password (more than 10000000 characters) is suppliedCVE-2023-300835.5Buffer Overflow vulnerability found in Libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the newVar_N in utiCVE-2023-300845.5An issue found in libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the stackVal function in util/decompile.CVE-2023-300855.5Buffer Overflow vulnerability found in Libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the cws2fws functioCVE-2023-300865.5Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffcCVE-2023-300875.5Buffer Overflow vulnerability found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_mk_string functioCVE-2023-300885.5An issue found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_execute function in mjs.c.CVE-2023-30095.4Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.CVE-2023-300909.8Semcms Shop v4.2 was discovered to contain an arbitrary file uplaod vulnerability via the component SEMCMS_Upfile.php. This vulnerability alCVE-2023-300929.8SourceCodester Online Pizza Ordering System v1.0 is vulnerable to SQL Injection via the QTY parameter.CVE-2023-300936.1A cross-site scripting (XSS) vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbi
CVE-2023-30077: Critical severity, CVSS 9.8 | Vulnix