EUVD-2020-23056

Malware in sbrugna...

CVE-2020-35382

SQL Injection in Classbooking before 2.4.1 via the username field of a CSV file when adding a new user...

CVE-2020-35382

SQL Injection in Classbooking before 2.4.1 via the username field of a CSV file when adding a new user...

CVE-2020-35382

SQL Injection in Classbooking before 2.4.1 via the username field of a CSV file when adding a new user...

Sql injection

SQL Injection in Classbooking before 2.4.1 via the username field of a CSV file when adding a new user...

CVE-2020-35382

SQL Injection in Classbooking before 2.4.1 via the username field of a CSV file when adding a new user...

CVE-2020-35382

SQL Injection in Classbooking before 2.4.1 via the username field of a CSV file when adding a new user...

CVE-2020-35382

CVE-2020-35382 affects Classbooking prior to version 2.4.1. It enables SQL Injection through the username field when adding a new user via a CSV, with potential impact to confidentiality and integrity. Remediation: upgrade to 2.4.1 or later; if upgrading isn’t possible, apply mitigations to sanit...

CVE-2020-35382: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in Classbooking before 2.4.1 via the username field of a CSV file when adding a new user...

PT-2020-17321

Name of the Vulnerable Software and Affected Versions Classbooking versions prior to 2.4.1 Description The issue allows for SQL injection via the username field of a CSV file when adding a new user. Recommendations For versions prior to 2.4.1, update to version 2.4.1 or later to resolve the issue...