CVE-2021-25201

2021-07-2313:31:48

mitre

www.cve.org

learning management system

sql injection

remote attackers

sensitive database information

cve-2021-25201

AI Score

8.2

Confidence

High

EPSS

0.002

Percentile

57.4%

JSON

SQL injection vulnerability in Learning Management System v 1.0 allows remote attackers to execute arbitrary SQL statements through the id parameter to obtain sensitive database information.

References

github.com/TCSWT/Learning-Management-System/blob/main/README.md