Advanced School Management System SQL Injection Vulnerability (CNVD-2022-68955)

2022-06-1700:00:00

China National Vulnerability Database

www.cnvd.org.cn

school management system

sql injection

angel jude reyes suarez

vulnerability

get admin profile

illegal sql commands

sensitive database data

cnvd-2022-68955

EPSS

0.001

Percentile

37.7%

JSON

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /get_admin_profile.php?my_index=The page lacks validation for external input SQL statements, which can be exploited to execute illegal SQL commands to steal sensitive database data.

EPSS

0.001

Percentile

37.7%

JSON

Related for CNVD-2022-68955