Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Imsurajghosh Clear all filters
TI-2023-04610 CVE-2023-5008 · GHSA-x39h-hvgc-6v42

Student Information System v1.0 - Unauthenticated SQL Injection

Priority MEDIUM 51

Student Information System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the 'regno' parameter of index.php page, allowing an external attacker to dump all the contents of the database contents…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00883 Published 2023-12-07 No fix listed CWE-89
TI-2023-03818 CVE-2023-4122 · GHSA-46c3-gjp8-q49w

Student Information System v1.0 - Insecure File Upload

Priority MEDIUM 46

Student Information System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'photo' parameter of my-profile page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01501 Published 2023-12-07 No fix listed CWE-434