Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior

Críticas / altas1449▲ 87 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

32 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-48722	Modificada	Crítica (9.8)	0.67%	—	Phpgurukul Student Result Management System	21/12/2023	17/6/2026	Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'class_name' parameter of the add_results.php resource does not validate the characters received and they are sent unfiltered to the database.
CVE-2023-48720	Modificada	Crítica (9.8)	0.67%	—	Phpgurukul Student Result Management System	21/12/2023	17/6/2026	Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database.
CVE-2023-48718	Modificada	Crítica (9.8)	0.67%	—	Phpgurukul Student Result Management System	21/12/2023	17/6/2026	Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'class_name' parameter of the add_students.php resource does not validate the characters received and they are sent unfiltered to the database.
CVE-2023-48716	Modificada	Crítica (9.8)	0.67%	—	Projectworlds Student Result Management System	21/12/2023	17/6/2026	Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'class_id' parameter of the add_classes.php resource does not validate the characters received and they are sent unfiltered to the database.
CVE-2022-42021	Modificada	Crítica (9.8)	0.90%	—	Best Student Result Management System Project Best Student Result Management System	20/10/2022	17/6/2026	Best Student Result Management System v1.0 is vulnerable to SQL Injection via /upresult/upresult/notice-details.php?nid=.
CVE-2022-40887	Modificada	Crítica (9.8)	1.2%	—	Best Student Result Management System Project Best Student Result Management System	29/9/2022	17/6/2026	SourceCodester Best Student Result Management System 1.0 is vulnerable to SQL Injection.
CVE-2020-35270	Modificada	Crítica (9.1)	1.8%	—	Student Result Management System Project Student Result Management System	26/1/2021	17/6/2026	Student Result Management System In PHP With Source Code is affected by SQL injection. An attacker can able to access of Admin Panel and manage every account of Result.