Kashipara Group Student Information System
5 CVEs affecting Kashipara Group Student Information System. Latest disclosed: 2023-12-20. Critical: 2, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-4122 | Critical | 9.9 | 2023-12-07 | Student Information System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'photo' parameter of my-profile page, allowing an authenticated a… |
CVE-2023-5008 | Critical | 9.8 | 2023-12-08 | Student Information System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the 'regno' parameter of index.php page, allowing an externa… |
CVE-2023-5011 | High | 8.8 | 2023-12-20 | Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'coursename' parameter of the marks.php resource doe… |
CVE-2023-5010 | High | 8.8 | 2023-12-20 | Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'coursecode' parameter of the marks.php resource doe… |
CVE-2023-5007 | High | 8.8 | 2023-12-20 | Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'id' parameter of the marks.php resource does not va… |