ZeroHour

CVE-2019-18344

PoC
CVSS 3.1
9.8 critical
EPSS
1%p70
Published
()
Modified
Description

Sourcecodester Online Grading System 1.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the student, instructor, department, room, class, or user page (id or classid parameter).

Vendors
online grading system project
Products
online grading system
Weakness
CWE-89
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.