eSkooly Security Vulnerabilities

eSkooly is a free online school management software from eSkooly Inc. A security vulnerability exists in eSkooly version 3.0, which originates from the execution of arbitrary code via the searchby parameter of the allstudents.php component and the id parameter of the requestmanager.php component...

CVE-2024-27709: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Eskooly Web Product v.3.0 allows a remote attacker to execute arbitrary code via the searchby parameter of the allstudents.php component and the id parameter of the requestmanager.php component...