CVE-2024-35359

2024-05-3017:15:34

[email protected]

web.nvd.nist.gov

vulnerability

diño physics school assistant

sql injection

code manipulation

7.7 High

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

JSON

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=view_item. Manipulating the argument id can result in SQL injection.

References

vuln.pentester.stream/pentester-vulnerability-research/post/2298737/vuln15-blind-sql-injection-time-based