itsourcecode University Management System 1.0: SQL Injection Risk

Summary

A security flaw in the University Management System 1.0 allows hackers to manipulate sensitive data. This could happen if an attacker sends malicious input to the system, potentially exposing confidential information. To protect your system, update to the latest version or apply a patch as soon as possible.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions	Fix available
angeljudesuarez	university_management_system	1.0	–

Original title

A vulnerability was detected in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /view_result.php. Performing a manipulation of the argument seme r...

Original description

A vulnerability was detected in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /view_result.php. Performing a manipulation of the argument seme results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.

nvd CVSS2.0 7.5

nvd CVSS3.1 7.3

nvd CVSS4.0 6.9

Vulnerability type

CWE-74 Injection

CWE-89 SQL Injection