exploitDog

CVE-2024-37870

Опубликовано: 09 июл. 2024

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

SQL injection vulnerability in processscore.php in Learning Management System Project In PHP With Source Code 1.0 allows attackers to execute arbitrary SQL commands via the id parameter.

Ссылки

https://github.com/TThuyyy/cve1/issues/3
Exploit
Issue Tracking
Third Party Advisory
https://github.com/TThuyyy/cve1/issues/3
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:itsourcecode:learning_management_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 28%

0.001

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

GHSA-wjhp-jjv9-4qc3

CVSS3: 9.8

github

больше 1 года назад

SQL injection vulnerability in processscore.php in Learning Management System Project In PHP With Source Code 1.0 allows attackers to execute arbitrary SQL commands via the id parameter.

EPSS

Процентиль: 28%

0.001

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89