| Package | Affected versions | Patched versions |
|---|---|---|
| school erp pro | = 1.0 |
School ERP Pro 1.0 contains a SQL injection vulnerability in the 'es_messagesid' parameter that allows attackers to manipulate database queries through GET requests. Attackers can exploit the vulnerable parameter by injecting crafted SQL statements to potentially extract, modify, or delete database information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free