CVE-2018-17575

CVE-2018-17575 affects SWA.JACAD 3.1.37 Build 024. The SQL injection vulnerability occurs in the /academico/aluno/esqueci-minha-senha/ page via the studentId parameter. Based on CNVD/CVE listings, a remote attacker can exploit this to execute arbitrary SQL commands. The provided documents do not ...