CVE-2022-34586

概要

参考情報

• Renrao/bug_report · Exploit

advanced school management system のその他の脆弱性

• CVE-2022-34580中 4.8Advanced School Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the address parameter at ip/…
• CVE-2022-34594中 4.8Advanced School Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component ip/school/moud…
• CVE-2022-34588高 8.8itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via the grade parameter at /school/view/timetable_insert_…
• CVE-2022-32372高 7.2itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_subject.php?id=.
• CVE-2022-32371高 7.2itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_teacher.php?id=.