CVE-2022-38832

School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/department/index.php?view=edit&id=...

Sql injection

School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/modstudent/index.php?view=view&id=...

Sql injection

School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/department/index.php?view=edit&id=...

CVE-2022-38878

School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/event/index.php?view=edit&id=...

CVE-2022-38878

School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/event/index.php?view=edit&id=...

CVE-2022-38878

CVE-2022-38878 affects School Activity Updates with SMS Notification v1.0. The vulnerability is a SQL Injection in the endpoint /activity/admin/modules/event/index.php?view=edit&id= where the id parameter is the vulnerable input. Impacted data could be exposed or tampered; CVSS v3.1 base metrics:...

CVE-2022-38832

CVE-2022-38832 affects School Activity Updates with SMS Notification v1.0, with a SQL Injection vulnerability via /activity/admin/modules/department/index.php?view=edit&id=. The root cause is injection through the id parameter. Impact is high (C/H/I/H; CVSS v3.1: 7.2; NETWORK vector). Public expl...

CVE-2022-38832

School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/department/index.php?view=edit&id=...

CVE-2022-38832

School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/department/index.php?view=edit&id=...

CVE-2022-38833

School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/modstudent/index.php?view=view&id=...

CVE-2022-38833

School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/modstudent/index.php?view=view&id=...

CVE-2022-38833

CVE-2022-38833 affects School Activity Updates with SMS Notification v1.0. The vulnerability is a SQL Injection in the PHP endpoint /activity/admin/modules/modstudent/index.php?view=view&id=, arising from unsafe handling of the id parameter in SQL queries within the modstudent module. The CVSS in...

School Activity Updates with SMS Notification SQL注入漏洞

School Activity Updates with SMS Notification is an online activity update with SMS notification from janobe Personal Developer. It is used to ensure that every student receives an SMS notification every time there is a school activity. A SQL injection vulnerability exists in School Activity...

School Activity Updates with SMS Notification SQL注入漏洞

School Activity Updates with SMS Notification is an online activity update with SMS notification from janobe Personal Developer. It is used to ensure that every student receives an SMS notification every time there is a school activity. A SQL injection vulnerability exists in School Activity...

School Activity Updates with SMS Notification SQL注入漏洞

School Activity Updates with SMS Notification is an online activity update with SMS notification from janobe Personal Developer. It is used to ensure that every student receives an SMS notification every time there is a school activity. A SQL injection vulnerability exists in School Activity...

PT-2022-24604 · Unknown · School Activity Updates With Sms Notification

Name of the Vulnerable Software and Affected Versions: School Activity Updates with SMS Notification version 1.0 Description: The issue concerns SQL Injection, which can be exploited via the "/activity/admin/modules/event/index.php?view=edit&id=" API endpoint. The id variable is vulnerable to thi...

PT-2022-24591 · Unknown · School Activity Updates With Sms Notification

Name of the Vulnerable Software and Affected Versions: School Activity Updates with SMS Notification version 1.0 Description: The issue is related to SQL Injection. It can be exploited via the "/activity/admin/modules/department/index.php?view=edit&id=" endpoint. The id variable is vulnerable to...

Threat Source newsletter (Sept. 15, 2022) — Teachers have to be IT admins now, too

By Jon Munshaw. Welcome to this week’s edition of the Threat Source newsletter. Public schools in the United States already rely on our teachers for so much — they have to be educators, occasional parental figures, nurses, safety officers, law enforcement and much more. Slowly, they’re having to...

Hackers Target Los Angeles School District With Ransomware

Plus: Albania cuts ties with Iran, claims of a TikTok data breach that didn’t happen, and much more...

kusuda-school.jp Cross Site Scripting vulnerability OBB-2906092

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...