CVE-2023-37682

CriticalCVSS 9.8

Published: 08/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.57%

43th percentile - higher than 43% of all known CVEs

A SQL injection vulnerability was discovered in Judging Management System v1.0 via the id parameter in /php-jms/deductScores.php.

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to data theft or modification.

It is recommended to validate and sanitize input data and to update the system to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-jms/deductScores.php.