Simple School Managment System SQL Injection Vulnerability (CNVD-2024-14038)

2024-02-2800:00:00

China National Vulnerability Database

www.cnvd.org.cn

code-projects

open source

version 1.0

sql injection

validation

external input

attacker

exploit

school/index.php

parameter

AI Score

7.8

Confidence

Low

EPSS

0.001

Percentile

19.3%

JSON

Simple School Managment System is Code-projects open source a simple school management system . Simple School Managment System version 1.0 SQL injection vulnerability , the vulnerability stems from the application lack of validation of external input SQL statement , an attacker can exploit the vulnerability through the School/index.php in the pass parameter for SQL injection .