Read the docs

Imsurajghosh

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Imsurajghosh records in CISA KEV

No Imsurajghosh vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Student Information System 2 records MEDIUM

Records

2 records

TI-2023-04610 CVE-2023-5008 · GHSA-x39h-hvgc-6v42

Student Information System v1.0 - Unauthenticated SQL Injection

Priority MEDIUM 51

Student Information System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the 'regno' parameter of index.php page, allowing an external attacker to dump all the contents of the database contents…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00883 Published 2023-12-07 No fix listed CWE-89
TI-2023-03818 CVE-2023-4122 · GHSA-46c3-gjp8-q49w

Student Information System v1.0 - Insecure File Upload

Priority MEDIUM 46

Student Information System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'photo' parameter of my-profile page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01501 Published 2023-12-07 No fix listed CWE-434
Open these records in search →