Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:35979
HistoryJun 14, 2022 - 8:58 a.m.

SQL Injection

2022-06-1408:58:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
sql injection
francoisjacquet/rosariosis
registrationsave
calendar
markingperiods
schoolfields
addressfields
peoplefields
studentfields
userfields
malicious sql query

EPSS

0.001

Percentile

48.4%

francoisjacquet/rosariosis is vulnerable to SQL injection. It does not escape the input DB identifier in RegistrationSave.fnc.php, Calendar.php, MarkingPeriods.php, SchoolFields.php, AddressFields.php, PeopleFields.php, StudentFields.php & UserFields.php, allowing an attacker to inject malicious SQL query.

EPSS

0.001

Percentile

48.4%