Vendors / Ingenious School Management System Project Ingenious School Management System Project Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now Ingenious School Management System Project records in CISA KEV No Ingenious School Management System Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Records 2 records in Ingenious School Management System · all components
Priority MEDIUM 45
/view/friend_profile.php in Ingenious School Management System 2.3.0 is vulnerable to Boolean-based and Time-based SQL injection in the 'friend_index' parameter of a GET request.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01358 · Published 2017-11-07 · No fix listed CWE-89
Priority MEDIUM 45
my_profile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file.
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03947 · Published 2017-10-29 · No fix listed CWE-434
Open these records in search → All records by CVSS severity
1 1 0 0 0
