SQL Injection Vulnerability in School Activity Updates with SMS Notification by Janobe
CVE-2022-38269

7.2HIGH

Key Information:

Vendor: School Activity Updates With Sms Notification Project
Status: School Activity Updates With Sms Notification
Vendor: CVE Published:; 8 September 2022

🔔 Create School Activity Updates With Sms Notification Project Vulnerability Alert

What is CVE-2022-38269?

The School Activity Updates with SMS Notification v1.0 has a vulnerability that allows attackers to exploit the component located at /modules/modstudent/index.php?view=edit&id=. By manipulating input parameters, unauthorized SQL commands can be executed, potentially compromising the database and exposing sensitive information. This vulnerability underscores the importance of sanitizing user inputs and employing robust security measures within web applications.

References

https://github.com/moyess/bug_report/blob/main/vendors/ja...

x_refsource_MISC

CVSS V3.1

Score:

7.2

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

High

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 8, 2022
Vulnerability Reserved
Aug 15, 2022

CVE-2022-38269 Data

JSON