2 matches found
CVE-2025-11076: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Campcodes Online Learning Management System 1.0. This impacts an unknown function of the file /admin/editteacher.php. Performing manipulation of the argument department results in sql injection. Remote exploitation of the attack is possible. The exploit has been made...
9.8CVSS6.9AI score0.00478EPSS
SaveExploits1References6
CVE-2024-54923: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was found in /admin/editteacher.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the department parameter...
9.8CVSS6.3AI score0.006EPSS
SaveExploits1References1
20