CVE-2022-38267
School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/user/index.php?view=edit&id=.
- Score
- CVSS 3.1 7.2 High
- Status
- Modified - cve@mitre.org
- Published
- 2022-09-08
- Last modified
- 2024-08-03
- Weaknesses
- CWE-89
Affected products
- School Activity Updates With Sms Notification (School Activity Updates With Sms Notification Project)
References
- https://github.com/moyess/bug_report/blob/main/vendors/janobe/school-activity-updates-sms-notification/SQLi-1.md
