CVE-2022-39976

CVE-2022-39976 pertains to the product “School Activity Updates with SMS Notification v1.0.” Multiple connected records confirm a concrete vulnerability: a SQL injection via the id parameter in the endpoint /modules/announcement/index.php?view=edit&id=, enabling an attacker to manipulate the data...

CVE-2022-38267

CVE-2022-38267 affects School Activity Updates with SMS Notification v1.0. The vulnerability is a SQL injection in the /modules/user/index.php?view=edit&id= parameter, as described across multiple sources. The underlying issue is unvalidated input in the id parameter leading to potential data dis...

CVE-2022-38832

CVE-2022-38832 affects School Activity Updates with SMS Notification v1.0, with a SQL Injection vulnerability via /activity/admin/modules/department/index.php?view=edit&id=. The root cause is injection through the id parameter. Impact is high (C/H/I/H; CVSS v3.1: 7.2; NETWORK vector). Public expl...

CVE-2022-38833

CVE-2022-38833 affects School Activity Updates with SMS Notification v1.0. The vulnerability is a SQL Injection in the PHP endpoint /activity/admin/modules/modstudent/index.php?view=view&id=, arising from unsafe handling of the id parameter in SQL queries within the modstudent module. The CVSS in...

CVE-2022-38878

CVE-2022-38878 affects School Activity Updates with SMS Notification v1.0. The vulnerability is a SQL Injection in the endpoint /activity/admin/modules/event/index.php?view=edit&id= where the id parameter is the vulnerable input. Impacted data could be exposed or tampered; CVSS v3.1 base metrics:...

CVE-2022-38268

CVE-2022-38268 affects School Activity Updates with SMS Notification v1.0. The vulnerability is a SQL injection in the component /modules/autonumber/index.php?view=edit&id= (id parameter), allowing an attacker to manipulate queries. The NVD metrics assign a base score of 7.2 (HIGH) with NETWORK a...

CVE-2022-38269

The CVE-2022-38269 entry corresponds to a SQL injection vulnerability in School Activity Updates with SMS Notification v1.0, exposed through the vulnerable endpoint /modules/modstudent/index.php?view=edit&id=. The linked Red Hat/NVD records confirm the affected software and the injection path. Ro...