CVE-2024-35354

2024-05-3016:15:10

[email protected]

web.nvd.nist.gov

vulnerability

diño physics school assistant

sql injection

code manipulation

file

class

master.php

save_category

7.7 High

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

JSON

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=save_category. Manipulating the argument id can result in SQL injection.

References

vuln.pentester.stream/pentester-vulnerability-research/post/2298670/vuln9-error-based-sql-injection