SQLi in UNI-PA's University Information System

CVE-2023-6441

What is CVE-2023-6441?

A vulnerability exists in the University Information System developed by UNI-PA University Marketing & Computer Internet Trade Inc. due to improper neutralization of special elements used in SQL commands, leading to an SQL Injection scenario. This flaw allows attackers to execute arbitrary SQL queries, posing a significant risk to data confidentiality and system integrity. Attackers can exploit this vulnerability to gain unauthorized access to sensitive information, modify, or delete data within the application, which can severely compromise the overall security posture of the affected system.

References