Student Information System
Approved changes feed: RSS · Atom
cpe:2.3:a:kashipara_group:student_information_system:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Kashipara Group (908cce17-bbee-5481-a9ff-106a78bca890) |
|---|---|
| Product | Student Information System (440c1f96-f71f-5704-a8cf-9ba40963ecd5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-5011 |
vulnerable | 2026-06-08 06:19:40.681585 |
Student Information System v1.0 - Multiple Authenticated SQL Injections (SQLi)
HIGH (8.8)
Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'coursename' parameter of the marks.php resource does not validate the characters received and they are sent unfiltered to the database.
Published: 2023-12-20T15:57:19.012Z
Updated: 2025-05-19T18:35:54.793Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5010 |
vulnerable | 2026-06-08 06:19:40.680919 |
Student Information System v1.0 - Multiple Authenticated SQL Injections (SQLi)
HIGH (8.8)
Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'coursecode' parameter of the marks.php resource does not validate the characters received and they are sent unfiltered to the database.
Published: 2023-12-20T15:55:07.052Z
Updated: 2025-05-19T18:34:51.808Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5008 |
vulnerable | 2026-06-08 06:19:40.676986 |
Student Information System v1.0 - Unauthenticated SQL Injection
CRITICAL (9.8)
Student Information System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the 'regno' parameter of index.php page, allowing an external attacker to dump all the contents of the database contents and bypass the login control.
Published: 2023-12-07T23:16:52.700Z
Updated: 2024-10-09T13:57:21.829Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5007 |
vulnerable | 2026-06-08 06:19:40.674492 |
Student Information System v1.0 - Multiple Authenticated SQL Injections (SQLi)
HIGH (8.8)
Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'id' parameter of the marks.php resource does not validate the characters received and they are sent unfiltered to the database.
Published: 2023-12-20T15:58:34.088Z
Updated: 2025-05-19T18:36:26.364Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4122 |
vulnerable | 2026-06-08 06:16:11.532938 |
Student Information System v1.0 - Insecure File Upload
CRITICAL (9.9)
Student Information System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'photo' parameter of my-profile page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application.
Published: 2023-12-07T23:10:04.387Z
Updated: 2025-05-28T13:51:13.982Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.