Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/sub_delete.php?id=5."
References
Configurations
History
12 Feb 2024, 14:27
Type | Values Removed | Values Added |
---|---|---|
First Time |
Code-projects
Code-projects simple School Management System |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
CPE | cpe:2.3:a:code-projects:simple_school_management_system:1.0:*:*:*:*:*:*:* | |
CWE | CWE-89 | |
References | () https://github.com/tubakvgc/CVEs/blob/main/Simple%20School%20Management%20System/Simple%20School%20Managment%20System%20-%20SQL%20Injection%20-5.md - Exploit, Product |
09 Feb 2024, 14:26
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-02-09 13:15
Updated : 2024-02-28 20:54
NVD link : CVE-2024-25312
Mitre link : CVE-2024-25312
CVE.ORG link : CVE-2024-25312
JSON object : View
Products Affected
code-projects
- simple_school_management_system
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')