2 matches found
Sql injection
Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow 1 remote attackers to execute arbitrary SQL commands via the key parameter in a resetpass action to index.php and 2 remote authenticated users to execute arbitrary SQL commands via the ADD parameter in a...
6.5CVSS8.8AI score0.00893EPSS
SaveExploits2References3Affected Software1
CVE-2009-2598
Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow 1 remote attackers to execute arbitrary SQL commands via the key parameter in a resetpass action to index.php and 2 remote authenticated users to execute arbitrary SQL commands via the ADD parameter in a...
6.5CVSS8.1AI score0.00893EPSS
SaveExploits2References3
20