exploitDog

CVE-2019-14754

Опубликовано: 08 авг. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Open-School 3.0, and Community Edition 2.3, allows SQL Injection via the index.php?r=students/students/document id parameter.

Ссылки

https://open-school.org
Product
Vendor Advisory
https://pastebin.com/xuZN5rJR
Exploit
Third Party Advisory
https://open-school.org
Product
Vendor Advisory
https://pastebin.com/xuZN5rJR
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:open-school:open-school:2.3:*:*:*:community:*:*:*

cpe:2.3:a:open-school:open-school:3.0:*:*:*:-:*:*:*

EPSS

Процентиль: 58%

0.0037

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-fp2x-m8qc-prrx

CVSS3: 9.8

github

больше 3 лет назад

Open-School 3.0, and Community Edition 2.3, allows SQL Injection via the index.php?r=students/students/document id parameter.

EPSS

Процентиль: 58%

0.0037

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89