CVE:CVE-2023-27214
CNNVD:CNNVD-202303-700
Student Management System是孟加拉国Sk.Amir Hamza个人开发者的一个简单的基于网络的学生管理软件。
Online Student Management System v1.0版本存在安全漏洞，该漏洞源于通过/eduauth/student/between-date-reprtsdetails.php中的fromdate和todate参数存在多个SQL注入漏洞。
solution:Upgrade online_student_management_system_project online_student_management_system to a higher version than 1.0,and avoid the version 1.0