Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Schoolmate Project records in CISA KEVNo Schoolmate Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 82
Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00752 · Published 2023-09-11 · No fix listed CWE-89
Priority HIGH 82
Schoolmate 1.3 is vulnerable to SQL Injection in the variable $schoolname from Database at ~\header.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00752 · Published 2023-09-11 · No fix listed CWE-89
Priority HIGH 82
Schoolmate v1.3 was discovered to contain multiple SQL injection vulnerabilities via the $courseid and $teacherid parameters at DeleteFunctions.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00846 · Published 2023-08-15 · No fix listed CWE-89
