CVE-2023-6648

Published December 10th, 2023

View on NVD ↗

CVSS v3

7.3

HIGH

CVSS v2

7.5

HIGH

Affected

PROJECT

Description

A vulnerability, which was classified as critical, was found in PHPGurukul Nipah Virus Testing Management System 1.0. This affects an unknown part of the file password-recovery.php. The manipulation of the argument username/contactno leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

dhabaleshwar/niv_testing_sqliforgotpassword

This repository shows the exploit for an Unauthenticated SQL Injection found in the Nipah virus (NiV) Testing Management System.

GitHub