Student Management System
CVE-2020-23935
CRITICAL
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
Kabir Alhasan Student Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin'
&& Password: (Write Something)".
AnalysisAI
Kabir Alhasan Student Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin'
&& Password: (Write Something)". Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Technical ContextAI
This vulnerability is classified as SQL Injection (CWE-89), which allows attackers to execute arbitrary SQL commands against the database. Kabir Alhasan Student Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin'
&& Password: (Write Something)". Affected products include: Kabir-M-Alhasan Student Management System.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use parameterized queries/prepared statements. Never concatenate user input into SQL. Apply least-privilege database permissions.
More in Student Management System
View allA vulnerability, which was classified as critical, was found in SourceCodester Student Management System. Rated critical
phpgurukul Student Management System 1.0 is vulnerable to SQL Injection in studentms/admin/search.php via the searchdata
A vulnerability classified as critical has been found in itsourcecode Student Management System 1.0. Rated medium severi
A vulnerability classified as critical has been found in SourceCodester Student Management System 1.0. Rated medium seve
A vulnerability classified as critical has been found in ningzichun Student Management System 1.0. Rated critical severi
A vulnerability was found in ningzichun Student Management System 1.0. Rated critical severity (CVSS 9.8), this vulnerab
Authentication bypass in sayan365's Student Management System exposes multiple protected endpoints to remote unauthentic
A security flaw has been discovered in itsourcecode Student Management System 1.0. This affects an unknown part of the f
A vulnerability was identified in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unkno
A vulnerability has been found in itsourcecode Student Managemen System 1.0. Affected by this issue is some unknown func
A vulnerability was determined in itsourcecode Student Management System 1.0. Impacted is an unknown function of the fil
A vulnerability was determined in itsourcecode Student Management System 1.0. The impacted element is an unknown functio
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today