NetSight
critical9.8

CVE-2023-51801

SQL Injection vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the id pa…

Impact

SQL Injection vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the id parameter in the student_form.php and the class_form.php pages.

Affected products

VendorProductAffected versions
Oretnom23Simple Student Attendance System
Version 1.0

Weakness classification

References