Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-14035
HistoryFeb 28, 2024 - 12:00 a.m.

Simple School Managment System SQL Injection Vulnerability (CNVD-2024-14035)

2024-02-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
school management system
code-projects
sql injection
vulnerability
validation
external input
sql statement
exploit
id parameter

7.9 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

19.4%

Simple School Managment System is Code-projects open source a simple school management system . Simple School Managment System version 1.0 SQL injection vulnerability , the vulnerability stems from the application lack of validation of external input SQL statement , an attacker can exploit the vulnerability through the id parameter in School/delete.php for SQL injection .

7.9 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

19.4%

Related for CNVD-2024-14035