PT-2019-19918

Name of the Vulnerable Software and Affected Versions eClass platform version ip.2.5.10.2.1 Description The issue allows an attacker to execute SQL commands via the "/admin/academic/studenview left.php" API endpoint, specifically by manipulating the StudentID parameter. Recommendations For eClass...