CVE-2020-37035highCWE-89

e-learning Php Script 0.1.0 - 'search' SQL Injection

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.8epss 0.4%

probabilidade de exploração

0.4%top 71% das CVEs

exploração observada

nãonenhuma fonte reporta

e-Learning PHP Script 0.1.0 contains a SQL injection vulnerability in the search functionality that allows attackers to manipulate database queries through unvalidated user input. Attackers can inject malicious SQL code in the 'search' parameter to potentially extract, modify, or access sensitive database information.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

Produtos afetados

amitkolloldey · e-learning PHP Script

Referências

https://github.com/amitkolloldey/elearning-script https://www.exploit-db.com/exploits/48629 https://www.vulncheck.com/advisories/e-learning-php-script-search-sql-injection