VYPR

School Data Nav

by Rich White

CVEs (1)

  • CVE-2009-2641Jul 28, 2009
    risk 0.03cvss epss 0.02

    PHP remote file inclusion vulnerability in app_and_readme/navigator/index.php in School Data Navigator allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. (dot dot) sequences.