CVE-2024-37840

2024-06-1700:00:00

mitre

github.com

sql injection

learning management system

remote attackers

sql commands

9.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

SQL injection vulnerability in processscore.php in Itsourcecode Learning Management System Project In PHP With Source Code v1.0 allows remote attackers to execute arbitrary SQL commands via the LessonID parameter.

References

github.com/ganzhi-qcy/cve/issues/4