Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-49979 — Best Student Management System v1.0 - Incorrect Access Control - Directory Listing | Kitploit
Tools/GitHubGitHub/geraldoalcantara/cve-2023-49979
Vulnerability AnalysisInformation GatheringWeb SecurityPenetration TestingMisconfiguration
GitHubgeraldoalcantara/cve-2023-49979

CVE-2023-49979

Best Student Management System v1.0 - Incorrect Access Control - Directory Listing

View Repository
22 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2023-49979

Best Student Management System v1.0 - Incorrect Access Control - Directory Listing

Description:  A directory listing vulnerability in Best Student Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring authentication/authorization.

Vulnerable Product Version: Best Student Management System v1.0
CVE Author: Geraldo Alcântara
Date: 28/11/2023
Confirmed on: 19/12/2023
CVE: CVE-2023-49979
Tested on: Windows

Steps to reproduce:

  1. Navigate to URL: http://{IP}/upresult/includes/ or http://{IP}/upresult/assets/. I found out that many important files of application can be accessed directly from this directory listing.

Discoverer(s)/Credits:
Geraldo Alcântara

Download Tool