Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-68960
HistoryJun 17, 2022 - 12:00 a.m.

Advanced School Management System SQL Injection Vulnerability (CNVD-2022-68960)

2022-06-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
school management system
sql injection
angel jude reyes suarez
vulnerability
sql commands
database data
cnvd-2022-68960

EPSS

0.001

Percentile

37.7%

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /get_grade.php?id=The page lacks validation for external SQL statements, which could be exploited to execute illegal SQL commands to steal sensitive database data.

EPSS

0.001

Percentile

37.7%

Related for CNVD-2022-68960