3 matches found
CVE-2024-33411: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in /model/getadminprofile.php in Campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the myindex parameter...
9.8CVSS6.3AI score0.00713EPSS
SaveExploits1References1
CVE-2022-32381
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getadminprofile.php?myindex=...
7.7AI score0.00956EPSS
SaveExploits1References1
CVE-2022-32381: Improper Neutralization of Special Elements used in an SQL Command
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getadminprofile.php?myindex=...
7.2CVSS7.2AI score0.00956EPSS
SaveExploits1References2
20