PHPGurukul Nipah Virus Testing Management System login.php sql injection

CVE-2023-5804

What is CVE-2023-5804?

A SQL injection vulnerability exists in the login.php file of the PHPGurukul Nipah Virus Testing Management System version 1.0. This vulnerability allows an attacker to manipulate the username argument, enabling unauthorized access to the database. Due to its design, the vulnerability is accessible remotely, which raises significant security concerns for users of this web application. Administrators are encouraged to implement immediate patching and conduct a thorough security review to mitigate potential risks.

References