critical9.8Public exploit code
CVE-2020-23935
Kabir Alhasan Student Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin'# && Password: (Write Something)".
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Student Management System 1.0 - SQLi Authentication Bypass2021-12-09 · webapps · php
Impact
Kabir Alhasan Student Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin'# && Password: (Write Something)".
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kabir-M-Alhasan | Student Management System | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/165215/Kabir-Alhasan-Student-Management-System-1.0-SQL-Injection.html
- https://github.com/enesozeser/Vulnerabilities/blob/master/CVE-2020-23935
- http://packetstormsecurity.com/files/165215/Kabir-Alhasan-Student-Management-System-1.0-SQL-Injection.html
- https://github.com/enesozeser/Vulnerabilities/blob/master/CVE-2020-23935