CVE-2023-5008

9.8 criticalEPSS 0.9%

Critical (9.8) in imsurajghosh student information system. EPSS 0.9% chance of exploitation in the next 30 days.

Student Information System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the 'regno' parameter of index.php page, allowing an external attacker to dump all the contents of the database contents and bypass the login control.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2023-12-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

imsurajghosh:student_information_system

References

https://fluidattacks.com/advisories/blechacz/
https://www.kashipara.com/
https://fluidattacks.com/advisories/blechacz/
https://www.kashipara.com/

Check your stack JSON