Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-68956
HistoryJun 17, 2022 - 12:00 a.m.

Advanced School Management System SQL Injection Vulnerability (CNVD-2022-68956)

2022-06-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
school management system
angel jude reyes suarez
sql injection
version v1.0
validation
external input
exploited
illegal sql commands
sensitive database data
cnvd-2022-68956

EPSS

0.001

Percentile

37.7%

Advanced School Management System, a school management system by Angel Jude Reyes Suarez, is a SQL injection vulnerability in version v1.0 of Advanced School Management System, which originates from /school/model/ get_classroom.php?id=The page lacks validation for external input SQL statements, which could be exploited to execute illegal SQL commands to steal sensitive database data.

EPSS

0.001

Percentile

37.7%

Related for CNVD-2022-68956