CVE-2023-5008

PoC —

CVSS 3.1

9.8 critical

EPSS

<1%p57

Published

Dec 8, 2023 (Dec 8, 2023)

Modified

Jun 17, 2026

Description

Student Information System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the 'regno' parameter of index.php page, allowing an external attacker to dump all the contents of the database contents and bypass the login control.

Vendors: imsurajghosh
Products: student information system
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.