CVE-2024-37840

2024-06-1719:15:58

[email protected]

web.nvd.nist.gov

sql injection

itsourcecode

lms

lessonid

remote attackers

cve-2024-37840

8.6 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

SQL injection vulnerability in processscore.php in Itsourcecode Learning Management System Project In PHP With Source Code v1.0 allows remote attackers to execute arbitrary SQL commands via the LessonID parameter.

References

github.com/ganzhi-qcy/cve/issues/4