ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Vulnerabilities

6 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos

ShowKEV onlyPublic PoCCVSS ≥ 9CVSS ≥ 7EPSS ≥ 10%EPSS ≥ 50%Window24h7d30d90dAll
StackAllWordPressE-commerceDrupalJoomlanpmpipMavenGoPackagistRubyGemsNuGet
SortpublishedepsscvssKEV dateupdatedvendor: schoolbox ✕
CVEVulnerabilityCVSSEPSSFlagsAffectedExposurePublished
CVE-2024-28094
+3 in the same advisory: …28096 …28097 …28095
Chat functionality in Schoolbox application before version 23.1.3 is vulnerable to blind SQL Injection enabling the authenticated attackers to read, modify, and

Chat functionality in Schoolbox application before version 23.1.3 is vulnerable to blind SQL Injection enabling the authenticated attackers to read, modify, and delete database records.

NVD description · AI analysis pending		8.8
group max
<1%
  • schoolbox schoolbox
—
CVE-2022-3059
+1 in the same advisory: …39020
The application was vulnerable to multiple instances of SQL injection (authenticated and unauthenticated) through a vulnerable parameter.

The application was vulnerable to multiple instances of SQL injection (authenticated and unauthenticated) through a vulnerable parameter. Due to the stacked query support, complex SQL commands could be crafted and injected into the vulnerable parameter and using a sleep based inferential SQL injection it was possible to extract data from the database.

NVD description · AI analysis pending		7.5
group max
<1%
  • schoolbox schoolbox
—