CVE-2023-3062
MediumCVSS 6.3Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
A critical vulnerability was found in the Agro-School Management System version 1.0. Manipulation of the 'password' argument in the index.php file leads to SQL injection.
Risk Assessment
This vulnerability allows for remote attacks, potentially leading to unauthorized access to the database and leakage of sensitive information.
Recommendation
It is recommended to immediately update the system to the latest version and implement input data filtering to prevent SQL injection attacks.
Original NVD description (English source)
A vulnerability was found in code-projects Agro-School Management System 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument password leads to sql injection. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-230568.