Schoolmation

CVEs (5)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-40946	Schoolmation Schoolmation	Cri	0.64	9.8	0.01	Sep 11, 2023	Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php.
CVE-2023-40944	Schoolmation Schoolmation	Cri	0.64	9.8	0.01	Sep 11, 2023	Schoolmate 1.3 is vulnerable to SQL Injection in the variable $schoolname from Database at ~\header.php.
CVE-2023-39850	Schoolmation Schoolmation	Cri	0.64	9.8	0.01	Aug 15, 2023	Schoolmate v1.3 was discovered to contain multiple SQL injection vulnerabilities via the $courseid and $teacherid parameters at DeleteFunctions.php.
CVE-2010-5011	Schoolmation Schoolmation		0.03	—	0.01	Nov 2, 2011	SQL injection vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers to execute arbitrary SQL commands via the session parameter.
CVE-2010-5010	Schoolmation Schoolmation		0.03	—	0.02	Nov 2, 2011	Cross-site scripting (XSS) vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers to inject arbitrary web script or HTML via the session parameter.

CVE-2023-40946CriSep 11, 2023
Schoolmation
Schoolmation
risk 0.64cvss 9.8epss 0.01
Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php.
CVE-2023-40944CriSep 11, 2023
Schoolmation
Schoolmation
risk 0.64cvss 9.8epss 0.01
Schoolmate 1.3 is vulnerable to SQL Injection in the variable $schoolname from Database at ~\header.php.
CVE-2023-39850CriAug 15, 2023
Schoolmation
Schoolmation
risk 0.64cvss 9.8epss 0.01
Schoolmate v1.3 was discovered to contain multiple SQL injection vulnerabilities via the $courseid and $teacherid parameters at DeleteFunctions.php.
CVE-2010-5011Nov 2, 2011
Schoolmation
Schoolmation
risk 0.03cvss —epss 0.01
SQL injection vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers to execute arbitrary SQL commands via the session parameter.
CVE-2010-5010Nov 2, 2011
Schoolmation
Schoolmation
risk 0.03cvss —epss 0.02
Cross-site scripting (XSS) vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers to inject arbitrary web script or HTML via the session parameter.