CVE-2022-38267

概要

参考情報

• moyess/bug_report · Exploit

school activity updates with sms notification のその他の脆弱性

• CVE-2022-39976緊急 9.8School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /modules/…
• CVE-2022-38878高 7.2School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/event/index.php?view=edit&id=.
• CVE-2022-38833高 7.2School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/modstudent/index.php?view=view…
• CVE-2022-38832高 7.2School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/department/index.php?view=edit…
• CVE-2022-38269高 7.2School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/modstu…