itsourcecode University Management System: SQL Injection via Malformed Input

Summary

A flaw in the itsourcecode University Management System version 1.0 allows hackers to manipulate data and potentially gain unauthorized access to sensitive information. This is a serious issue because it could lead to the theft or modification of critical data. To protect your system, update to a secured version of the software or apply the necessary patches to prevent exploitation.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions	Fix available
angeljudesuarez	university_management_system	1.0	–

Original title

A vulnerability was identified in itsourcecode University Management System 1.0. Affected by this issue is some unknown functionality of the file /add_result.php. Such manipulation of the argument ...

Original description

A vulnerability was identified in itsourcecode University Management System 1.0. Affected by this issue is some unknown functionality of the file /add_result.php. Such manipulation of the argument subject leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.

nvd CVSS2.0 7.5

nvd CVSS3.1 7.3

nvd CVSS4.0 6.9

Vulnerability type

CWE-74 Injection

CWE-89 SQL Injection