code-projects Faculty Management System crud.php sql injection
CVE-2023-7096

9.8CRITICAL

Key Information:

Vendor: code-projects
Status: Faculty Management System
Vendor: CVE Published:; 25 December 2023

🔔 Create code-projects Vulnerability Alert

What is CVE-2023-7096?

A vulnerability exists within the Faculty Management System 1.0 developed by Code-Projects, where improper handling of user inputs in the /admin/php/crud.php file allows for SQL injection attacks. This security flaw enables attackers to manipulate the argument 'fieldname', potentially leading to unauthorized database access and data manipulation. The vulnerability can be exploited remotely, posing significant risks to the integrity and confidentiality of the system's data.