CVE-2024-28094

概要

参考情報

• schoolbox.education · Product
• themissinglink.com.au/security-advisories/cve-2024-28094 · Third Party Advisory

schoolbox のその他の脆弱性

• CVE-2024-28097中 5.4Calendar functionality in Schoolbox application before version 23.1.3 is vulnerable to stored cross-site scripting allowing authenticated …
• CVE-2024-28096中 5.4Class functionality in Schoolbox application before version 23.1.3 is vulnerable to stored cross-site scripting allowing authenticated att…
• CVE-2024-28095中 5.4News functionality in Schoolbox application before version 23.1.3 is vulnerable to stored cross-site scripting allowing authenticated atta…
• CVE-2022-3059高 7.5 The application was vulnerable to multiple instances of SQL injection (authenticated and unauthenticated) through a vulnerable parameter. D…
• CVE-2022-39020中 6.1 Multiple instances of XSS (stored and reflected) was found in the application. For example, features such as student assessment submission,…