Critical severity9.8NVD Advisory· Published Aug 11, 2023· Updated Jun 17, 2026

CVE-2020-36034

Description

SQL Injection vulnerability in oretnom23 School Faculty Scheduling System version 1.0, allows remote attacker to execute arbitrary code, escalate privilieges, and gain sensitive information via crafted payload to id parameter in manage_user.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

School Faculty Scheduling System Project/School Faculty Scheduling System
cpe:2.3:a:school_faculty_scheduling_system_project:school_faculty_scheduling_system:1.0:*:*:*:*:*:*:*
oretnom23/School Faculty Scheduling Systemdescription
Oretno/School Faculty Scheduling Systemllm-create
Range: = 1.0
TCSWT/School-Faculty-Scheduling-Systemllm-create
Range: = 1.0
Sourcecodester/School Faculty Scheduling Systemllm-create
Range: = 1.0

Patches

Vulnerability mechanics

References

www.sourcecodester.com/download-codenvdProduct
www.sourcecodester.com/php/14535/school-faculty-scheduling-system-using-phpmysqli-source-code.htmlnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000