CVE-2023-48719

Name of the Vulnerable Software and Affected Versions Student Result Management System version 1.0

Description The issue concerns an Unauthenticated SQL Injection vulnerability. Specifically, the roll no parameter of the "add students.php" resource does not validate the characters received, and they are sent unfiltered to the database.

Recommendations For Student Result Management System version 1.0, consider validating and filtering the input for the roll no parameter in the "add students.php" resource to prevent SQL injection attacks. As a temporary workaround, restrict access to the "add students.php" resource until a proper fix is implemented.