Lucene search

K
nvd[email protected]NVD:CVE-2024-35356
HistoryMay 30, 2024 - 4:15 p.m.

CVE-2024-35356

2024-05-3016:15:10
CWE-89
web.nvd.nist.gov
vulnerability
diño physics school assistant
sql injection
version 2.3

6.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

7.7 High

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=save_item. Manipulating the argument id can result in SQL injection.

6.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

7.7 High

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

Related for NVD:CVE-2024-35356