Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-68954
HistoryJun 17, 2022 - 12:00 a.m.

Advanced School Management System SQL Injection Vulnerability (CNVD-2022-68954)

2022-06-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
8

0.001 Low

EPSS

Percentile

37.9%

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /get_teacher.php?id=The page lacks validation for external input SQL statements, which can be exploited to execute illegal SQL commands to steal sensitive database data.

0.001 Low

EPSS

Percentile

37.9%

Related for CNVD-2022-68954