3 matches found
Sql injection
SQL injection vulnerability in login.php in Pre Lecture Exercises PLEs CMS 1.0 beta 4.2 allows remote attackers to execute arbitrary SQL commands via the school parameter...
7.5CVSS9.1AI score0.0095EPSS
SaveExploits2References2Affected Software1
CVE-2009-0394
The CVE-2009-0394 entry describes a SQL injection vulnerability in the login.php of Pre Lecture Exercises (PLEs) CMS 1.0 beta 4.2 . An attacker can exploit the vulnerability by supplying a crafted value to the school parameter , potentially allowing remote execution of arbitrary SQL commands. The...
7.5CVSS8.7AI score0.0095EPSS
SaveExploits2References2Affected Software1
20