CVE-2023-5927

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability has been found in Campcodes Simple Student Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/courses/manage_course.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-244327.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
Campcodes	Simple Student Information System	1.0

References

https://github.com/E1CHO/cve_hub/blob/main/Simple%20Student%20Information%20System/Simple%20Student%20Information%20System%20-%20vuln%205.pdfExploit, Third Party Advisory
https://vuldb.com/?ctiid.244327Permissions Required, Third Party Advisory
https://vuldb.com/?id.244327Third Party Advisory
https://github.com/E1CHO/cve_hub/blob/main/Simple%20Student%20Information%20System/Simple%20Student%20Information%20System%20-%20vuln%205.pdfExploit, Third Party Advisory
https://vuldb.com/?ctiid.244327Permissions Required, Third Party Advisory
https://vuldb.com/?id.244327Third Party Advisory

Timeline

Published: Nov 2, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-59287.5A vulnerability was found in Campcodes Simple Student Information System 1.0 and classified as critical. Affected by this issue is some unkn CVE-2023-59297.5A vulnerability was found in Campcodes Simple Student Information System 1.0. It has been classified as critical. This affects an unknown pa CVE-2023-59306.1A vulnerability was found in Campcodes Simple Student Information System 1.0. It has been declared as problematic. This vulnerability affect CVE-2023-59318.8The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 does not validate files to be uploaded, which could allow a CVE-2023-59324.8The Travelpayouts: All Travel Brands in One Place WordPress plugin before 1.1.14 does not sanitise and escape a parameter before outputting CVE-2023-59335.4An issue has been discovered in GitLab CE/EE affecting all versions after 13.7 before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 CVE-2023-59347.3The Travelpayouts: All Travel Brands in One Place WordPress plugin before 1.1.13 does not have CSRF check in place when importing settings f CVE-2023-59357.4When configuring Arc (e.g. during the first setup), a local web interface is provided to ease the configuration process. Such web interface CVE-2023-59367.8On Unix systems (Linux, MacOS), Arc uses a temporary file with unsafe privileges. By tampering with such file, a malicious local user in CVE-2023-59373.8On Windows systems, the Arc configuration files resulted to be world-readable. This can lead to information disclosure by local attackers CVE-2023-59388.0Multiple functions use archives without properly validating the filenames therein, rendering the application vulnerable to path traversal vi CVE-2023-59397.2The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 loads the contents of the import file in an unsafe manner,