CVE-2022-38833

School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/modstudent/index.php?view=view=...

CVE-2022-38833

creationtimestamp| type| source ---|---|--- 2022-12-03 02:48:22+00:00| seen| https://t.me/cibsecurity/49909...

CVE-2022-38833

School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/modstudent/index.php?view=view&id=...

CVE-2022-38833

CVE-2022-38833 affects School Activity Updates with SMS Notification v1.0. The vulnerability is a SQL Injection in the PHP endpoint /activity/admin/modules/modstudent/index.php?view=view&id=, arising from unsafe handling of the id parameter in SQL queries within the modstudent module. The CVSS in...