CVE-2020-35382

2020-12-1416:15:12

Google

osv.dev

8.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

39.3%

JSON

SQL Injection in Classbooking before 2.4.1 via the username field of a CSV file when adding a new user.

CPENameOperatorVersion
classroombookingseq2.0.2
classroombookingseq2.0.5
classroombookingseq2.2.0
classroombookingseq2.0.0
classroombookingseq2.1.1
classroombookingseq2.3.0-beta.1
classroombookingseq2.1.2
classroombookingseq2.3.1
classroombookingseq2.1.3
classroombookingseq2.1.0

Name	Operator	Version
classroombookings	eq	2.0.2
classroombookings	eq	2.0.5
classroombookings	eq	2.2.0
classroombookings	eq	2.0.0
classroombookings	eq	2.1.1
classroombookings	eq	2.3.0-beta.1
classroombookings	eq	2.1.2
classroombookings	eq	2.3.1
classroombookings	eq	2.1.3
classroombookings	eq	2.1.0