Approved changes feed: RSS · Atom

cpe:2.3:a:kashipara:student_information_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorKashipara (6b7db86c-2a94-5a2d-adbe-6158c7191f84)
ProductStudent Information System (1ed29b48-859d-5ed1-8586-2d266110aa3d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-5011 vulnerable 2026-06-03 14:53:46.476815 Student Information System v1.0 - Multiple Authenticated SQL Injections (SQLi)
HIGH (8.8)
Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'coursename' parameter of the marks.php resource does not validate the characters received and they are sent unfiltered to the database.
Published: 2023-12-20T15:57:19.012Z
Updated: 2025-05-19T18:35:54.793Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5010 vulnerable 2026-06-03 14:53:46.476370 Student Information System v1.0 - Multiple Authenticated SQL Injections (SQLi)
HIGH (8.8)
Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'coursecode' parameter of the marks.php resource does not validate the characters received and they are sent unfiltered to the database.
Published: 2023-12-20T15:55:07.052Z
Updated: 2025-05-19T18:34:51.808Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5007 vulnerable 2026-06-03 14:53:46.472353 Student Information System v1.0 - Multiple Authenticated SQL Injections (SQLi)
HIGH (8.8)
Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'id' parameter of the marks.php resource does not validate the characters received and they are sent unfiltered to the database.
Published: 2023-12-20T15:58:34.088Z
Updated: 2025-05-19T18:36:26.364Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.