Vulnerabilities

TI-2017-12172 CVE-2017-16561 · GHSA-vr98-prph-h9gq

/view/friend_profile.php in Ingenious School Management System 2.3.0 is vulnerable to…

MEDIUM 45

/view/friend_profile.php in Ingenious School Management System 2.3.0 is vulnerable to Boolean-based and Time-based SQL injection in the 'friend_index' parameter of a GET request.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01358 Published 2017-11-07 No fix listed CWE-89

TI-2017-11687 CVE-2017-15957 · GHSA-qrwq-jfp7-q2qg

my_profile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file.

MEDIUM 45

my_profile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.03947 Published 2017-10-29 No fix listed CWE-434

Vulnerabilities

Filters

/view/friend_profile.php in Ingenious School Management System 2.3.0 is vulnerable to…

my_profile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file.