Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v6wf-hvfr-jx4r

Опубликовано: 09 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 5.5
CVSS3: 7.3

Описание

A vulnerability was found in itsourcecode Student Management System 1.0. Affected by this issue is some unknown functionality of the file /promote.php. The manipulation of the argument sy results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.

A vulnerability was found in itsourcecode Student Management System 1.0. Affected by this issue is some unknown functionality of the file /promote.php. The manipulation of the argument sy results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.

EPSS

Процентиль: 11%
0.00037
Низкий

5.5 Medium

CVSS4

7.3 High

CVSS3

Дефекты

CWE-74

Связанные уязвимости

CVSS3: 7.3
nvd
2 месяца назад

A vulnerability was found in itsourcecode Student Management System 1.0. Affected by this issue is some unknown functionality of the file /promote.php. The manipulation of the argument sy results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.

EPSS

Процентиль: 11%
0.00037
Низкий

5.5 Medium

CVSS4

7.3 High

CVSS3

Дефекты

CWE-74