itsourcecode University Management System: Student Search SQL Injection

Summary

A vulnerability in itsourcecode University Management System allows attackers to manipulate student search results and potentially access sensitive data. This can happen if an attacker sends malicious input to the system's student search function. To protect your system, update to the latest version of the software or disable the affected function until a fix is available.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions	Fix available
angeljudesuarez	university_management_system	1.0	–

Original title

A weakness has been identified in itsourcecode University Management System 1.0. Impacted is an unknown function of the file /admin_search_student.php. This manipulation of the argument admin_searc...

Original description

A weakness has been identified in itsourcecode University Management System 1.0. Impacted is an unknown function of the file /admin_search_student.php. This manipulation of the argument admin_search_student causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.

nvd CVSS2.0 7.5

nvd CVSS3.1 7.3

nvd CVSS4.0 6.9

Vulnerability type

CWE-74 Injection

CWE-89 SQL Injection