PT-2025-17563 · Unknown · Student Study Center Desk Management System

Published 2025-04-22 · Updated 2025-04-24 · CVE-2023-44752

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Student Study Center Desk Management System version 1.0

Description The issue allows attackers to bypass authentication via a crafted GET request to "/php-sscdms/admin/login.php". This enables unauthorized access to the system.

Recommendations For Student Study Center Desk Management System version 1.0, consider temporarily restricting access to the "/php-sscdms/admin/login.php" endpoint until a patch is available. As a mitigation measure, review and strengthen the authentication mechanism to prevent bypass attempts. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2023-44752

Affected Products

Student Study Center Desk Management System

References · 6

• 🔥 https://flashy-lemonade-192.notion.site/Login-Bypass-in-Student-Study-Center-Desk-Management-System-v1-0-fe410cff4fc3441ea4c5aa663225e445?pvs=4 · Exploit
• 🔥 https://flashy-lemonade-192.notion.site/Login-Bypass-in-Student-Study-Center-Desk-Management-System-v1-0-fe410cff4fc3441ea4c5aa663225e445 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-44752 · Security Note
• https://osv.dev/vulnerability/CVE-2023-44752 · Vendor Advisory
• https://twitter.com/cybercronai/status/1915243299616534800 · Twitter Post
• https://twitter.com/CVEnew/status/1914738564266361329 · Twitter Post