CVE-2020-28070

CRITICAL 9.8CVE-2020-28070 · Published 23/12/2020 · updated 17/06/2026

Package	Affected versions	Patched versions
alumni management system alumni_management_system_project	`= 1.0`	No fix yet

Description

SourceCodester Alumni Management System 1.0 is affected by SQL injection causing arbitrary remote code execution from GET input in view_event.php via the 'id' parameter.

References

packetstormsecurity.com/files/160583/Alumni-Management-System-1.0-Blind-SQL-Injection.html · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free