CVE-2023-6441

Critical

Published: 14/02/2024(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The UNI-PA University Information System has an SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands. This issue affects versions of the system before 12.12.2023.

Risk Assessment

An attacker could exploit this vulnerability to gain control over the database, potentially leading to the disclosure of sensitive information or data manipulation.

Recommendation

It is recommended to update the university information system to a version after 12.12.2023 to mitigate this vulnerability.

Original NVD description (English source)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UNI-PA University Marketing & Computer Internet Trade Inc. University Information System allows SQL Injection. This issue affects University Information System: before 12.12.2023.