CVE-2023-3008

HighCVSS 7.3

Published: 31/05/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.80%

52th percentile - higher than 52% of all known CVEs

Summary

A critical vulnerability has been found in ningzichun Student Management System version 1.0, affecting the login.php file. Manipulation of the user/pass arguments leads to SQL injection.

Risk Assessment

This vulnerability allows for remote exploitation, potentially leading to unauthorized access to the database and leakage of sensitive information.

Recommendation

It is recommended to immediately update the system to the latest version and implement additional security measures to protect against SQL injection attacks.

Other vulnerabilities in login.php

CVE-2026-12775High
A vulnerability was detected in Montodel House-Rental-Management affecting the /login.php file. Manipulation of the Username argument leads to SQL injection, allowing for remote attack execution.

Original NVD description (English source)

A vulnerability classified as critical has been found in ningzichun Student Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument user/pass leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-230355.