CVE-2024-28095

概要

参考情報

• schoolbox.education · Product
• themissinglink.com.au/security-advisories/cve-2024-28095 · Third Party Advisory

schoolbox のその他の脆弱性

• CVE-2024-28097中 5.4Calendar functionality in Schoolbox application before version 23.1.3 is vulnerable to stored cross-site scripting allowing authenticated …
• CVE-2024-28096中 5.4Class functionality in Schoolbox application before version 23.1.3 is vulnerable to stored cross-site scripting allowing authenticated att…
• CVE-2024-28094高 8.8Chat functionality in Schoolbox application before version 23.1.3 is vulnerable to blind SQL Injection enabling the authenticated attacker…
• CVE-2022-3059高 7.5 The application was vulnerable to multiple instances of SQL injection (authenticated and unauthenticated) through a vulnerable parameter. D…
• CVE-2022-39020中 6.1 Multiple instances of XSS (stored and reflected) was found in the application. For example, features such as student assessment submission,…