CVE-2023-5010 - Student Information System v1.0 - Multiple Authenticated SQL Injections (SQLi)

Back Back to CVE browser

HIGH

Student Information System v1.0 - Multiple Authenticated SQL Injections (SQLi)

Published Dec 20, 2023

8.8

HIGH

CVSS 3.1

EPSS 0.67%

Description

Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'coursecode' parameter of the marks.php resource does not validate the characters received and they are sent unfiltered to the database.

Affected products

Vendor Kashipara Group Product Student Information System Default
unaffected
Affected
- 1.0

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Kashipara Group	Student Information System	unaffected	Affected 1.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-57356
Advisory
https://fluidattacks.com/advisories/kissin/
third-party-advisoryExploitThird Party Advisory
https://www.kashipara.com/
productNot Applicable

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-57356		Advisory
https://fluidattacks.com/advisories/kissin/		third-party-advisoryExploitThird Party Advisory
https://www.kashipara.com/		productNot Applicable

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Fluid Attacks

Published Dec 20, 2023

Updated May 19, 2025

Reserved Sep 15, 2023

Link CVE-2023-5010

CISA Vulnrichment

Updated Nov 27, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2023-5010

Red Hat

No data

ENISA EUVD

Assigner Fluid Attacks

Published Dec 20, 2023

Updated May 19, 2025

Link EUVD-2023-57356

GitHub

No data