CVE-2024-37840

SQL injection vulnerability in processscore.php in Itsourcecode Learning Management System Project In PHP With Source Code v1.0 allows remote attackers to execute arbitrary SQL commands via the LessonID parameter.

Score

CVSS 3.1 8.8 High

Status

Analyzed - cve@mitre.org

Published

2024-06-17

Last modified

2024-08-02

Weaknesses

CWE-89

Affected products

• Learning Management System (Itsourcecode)
• Learning Management System Project In Php (Itsourcecode)

References

• https://github.com/ganzhi-qcy/cve/issues/4