CVE-2023-46025

Опубликовано: 14 нояб. 2023

Источник: nvd

CVSS3: 4.9

EPSS Низкий

Описание

SQL Injection vulnerability in teacher-info.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to obtain sensitive information via the 'editid' parameter.

Ссылки

https://github.com/ersinerenler/phpgurukul-Teacher-Subject-Allocation-Management-System-1.0/blob/main/CVE-2023-46025-phpgurukul-Teacher-Subject-Allocation-Management-System-1.0-SQL-Injection-Vulnerability.md
Exploit
Third Party Advisory
https://github.com/ersinerenler/phpgurukul-Teacher-Subject-Allocation-Management-System-1.0/blob/main/CVE-2023-46025-phpgurukul-Teacher-Subject-Allocation-Management-System-1.0-SQL-Injection-Vulnerability.md
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:phpgurukul:teacher_subject_allocation_management_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 33%

0.00129

Низкий

4.9 Medium

CVSS3

Дефекты

CWE-89

Связанные уязвимости

GHSA-2ff7-cxfg-3p4c