CVE-2022-38878
School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/event/index.php?view=edit&id=.
- Score
- CVSS 3.1 7.2 High
- Status
- Modified - cve@mitre.org
- Published
- 2022-09-16
- Last modified
- 2025-06-03
- Weaknesses
- CWE-89
Affected products
- School Activity Updates With Sms Notification (School Activity Updates With Sms Notification Project)
References
- https://github.com/MagicWHat/bug_report/blob/main/vendors/wsatm/school-activity-updates-sms-notification/SQLi-1.md
