CVE-2023-1909

CVE-2023-1909 is a critical SQL injection vulnerability affecting PHPGurukul BP Monitoring Management System version 1.0. Specifically, it allows remote attackers to inject malicious SQL queries through the 'name' or 'mobno' parameters within the 'profile.php' file's User Profile Update Handler. This vulnerability carries a CVSS score of 6.5 (Medium) due to its network-based attack vector, low attack complexity, and high impact on confidentiality and integrity, though it requires high privileges to exploit. While the exploit has been publicly disclosed, there is no evidence of active exploitation, readily available exploit tools like Metasploit or Nuclei, or significant community discussion or media coverage.