SQL Injection Vulnerabilities in Student Attendance Management System by Rickxy
CVE-2023-41522

8.8HIGH

Key Information:

Vendor

Rickxy

Status
Student Attendance Management System
Vendor
CVE Published:
7 August 2025

What is CVE-2023-41522?

The Student Attendance Management System version 1 is vulnerable to multiple SQL injection attacks through the createStudents.php file. This vulnerability arises from unsanitized input in the Id, firstname, and admissionNumber parameters, allowing attackers to manipulate SQL queries and potentially access sensitive information stored in the database. Proper input validation and prepared statements should be implemented to mitigate this risk.

References

https://github.com/rickxy/Student-Attendance-Management-S...
https://gist.github.com/celbahraoui/f13884670ac6668ae05b6...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.