ГлавнаяУязвимости → CVE-2024-37870
9.8критическая

CVE-2024-37870

Описание

SQL injection vulnerability in processscore.php in Learning Management System Project In PHP With Source Code 1.0 allows attackers to execute arbitrary SQL commands via the id parameter.

Затрагиваемое ПО
Itsourcecode Learning management system
CVSS
Балл9.8 — критическая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Источники
https://github.com/TThuyyy/cve1/issues/3https://github.com/TThuyyy/cve1/issues/3