SWA SWA.JACAD SQL Injection Vulnerability

SWA SWA.JACAD is an academic management system. The system features academic management, financial management and a web portal. A SQL injection vulnerability exists in the /academico/aluno/esqueci-minha-senha/ page in SWA SWA.JACAD version 3.1.37 Build 024. A remote attacker can exploit this...

CVE-2018-17575

SWA SWA.JACAD 3.1.37 Build 024 has SQL Injection via the /academico/aluno/esqueci-minha-senha/ studentId parameter...