CVE-2023-5010

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'coursecode' parameter of the marks.php resource does not validate the characters received and they are sent unfiltered to the database.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Dec 20, 2023
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-501005.4JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via carousel image editing.CVE-2023-501015.4JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via Label management editing.CVE-2023-501025.4JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS).CVE-2023-501049.8ZZCMS 2023 has a file upload vulnerability in 3/E_bak5.1/upload/index.php, allowing attackers to exploit this loophole to gain server privilCVE-2023-50118.8Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'coursename' parameter of the marCVE-2023-501107.5TestLink through 1.9.20 allows type juggling for authentication bypass because === is not used.CVE-2023-50127.8A vulnerability, which was classified as problematic, was found in Topaz OFD 2.11.0.201. This affects an unknown part of the file C:\ProgramCVE-2023-501205.5MP4Box GPAC version 2.3-DEV-rev636-gfbd7e13aa-master was discovered to contain an infinite loop in the function av1_uvlc at media_tools/av_pCVE-2023-501215.7Autel EVO NANO drone flight control firmware version 1.6.5 is vulnerable to denial of service (DoS).CVE-2023-501238.1The number of attempts to bring the Hozard Alarm system (alarmsystemen) v1.0 to a disarmed state is not limited. This could allow an attackeCVE-2023-501246.8Flient Smart Door Lock v1.0 is vulnerable to Use of Default Credentials. Due to default credentials on a debug interface, in combination witCVE-2023-501255.9A default engineer password set on the Hozard alarm system (Alarmsysteem) v1.0 allows an attacker to bring the alarm system to a disarmed st