CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2024-41236

A SQL injection vulnerability in /smsa/admin_login.php in Kashipara Responsive School Management System v3.2.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter of the Admin Login Page

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 31.3%

CVSS Severity

CVSS v3 Score 7.2

References

https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Responsive%20School%20Management%20System%20v3.2.0/SQL%20Injection%20-%20Admin.pdf
https://www.kashipara.com/project/php/12362/responsive-school-management-system-php-project-source-code

Products affected by CVE-2024-41236

Lopalopa » Responsive School Management System » Version: 3.2.0

cpe:2.3:a:lopalopa:responsive_school_management_system:3.2.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-41236

Products

Pricing

Contact Us