Sql injection

2019-08-0813:15:00

PRIOn knowledge base

www.prio-n.com

9.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.6%

Open-School 3.0, and Community Edition 2.3, allows SQL Injection via the index.php?r=students/students/document id parameter.

CPENameOperatorVersion
open-schooleq2.3
open-schooleq3.0

CPE	Name	Operator	Version
	open-school	eq	2.3
	open-school	eq	3.0

References

open-school.org

pastebin.com/xuZN5rJR