CVE-2023-40946

Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php...

CVE-2023-40944

Schoolmate 1.3 is vulnerable to SQL Injection in the variable $schoolname from Database at \header.php...

EUVD-2023-43550

Malicious code in bioql PyPI...

EUVD-2023-45483

Malicious code in bioql PyPI...

EUVD-2023-45485

Malicious code in bioql PyPI...

CVE-2023-40946

Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php...

CVE-2023-40944

Schoolmate 1.3 is vulnerable to SQL Injection in the variable $schoolname from Database at \header.php...

CVE-2023-40946

Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php...

CVE-2023-40944

Schoolmate 1.3 is vulnerable to SQL Injection in the variable $schoolname from Database at \header.php...

CVE-2023-40944

Schoolmate 1.3 is vulnerable to SQL Injection in the variable $schoolname from Database at \header.php...

CVE-2023-40946

Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php...

Sql injection

Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php...

Sql injection

Schoolmate 1.3 is vulnerable to SQL Injection in the variable $schoolname from Database at \header.php...

CVE-2023-40946

CVE-2023-40946 affects Schoolmate 1.3 with a SQL Injection in the SESSION variable $username used in ValidateLogin.php. The NVD entry lists CVSS v3.1: 9.8 (CRITICAL) with network attack vector, no user interaction, and no privileges required; impact to confidentiality, integrity, and availability...

Schoolmate SQL Injection Vulnerability

Schoolmate is a PHP/MySQL solution for elementary, middle and high schools by mrmunkey22 Individual Developer. A security vulnerability exists in Schoolmate version 1.3, which stems from a SQL injection vulnerability in the variable $schoolname in the header.php database...

CVE-2023-40946: Improper Neutralization of Special Elements used in an SQL Command

Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php...

CVE-2023-40944: Improper Neutralization of Special Elements used in an SQL Command

Schoolmate 1.3 is vulnerable to SQL Injection in the variable $schoolname from Database at \header.php...

CVE-2023-40946

Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php...

CVE-2023-40944

CVE-2023-40944 affects Schoolmate 1.3 with a SQL Injection in the variable $schoolname used in the database query in header.php. The vulnerability is characterized as CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base score 9.8 (CRITICAL). Connected sources corroborate the issue across multiple...

PT-2023-27714 · Unknown · Schoolmate

Name of the Vulnerable Software and Affected Versions: Schoolmate version 1.3 Description: The issue concerns SQL Injection in the ValidateLogin.php file, specifically affecting the variable $username from the SESSION. Recommendations: For Schoolmate version 1.3, consider restricting access to th...