Vulnerabilities

TI-2009-02483 CVE-2009-2598 · GHSA-frq7-c9fm-p56v

Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier…

LOW 31

Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow (1) remote attackers to execute arbitrary SQL commands via the key parameter in a resetpass action to index.php and (2) remote…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.00893 Published 2009-07-27 No fix listed CWE-89

TI-2009-01945 CVE-2009-2037 · GHSA-xc86-28c4-frpj

Multiple directory traversal vulnerabilities in Online Grades & Attendance 3.2.5 and…

LOW 34

Multiple directory traversal vulnerabilities in Online Grades & Attendance 3.2.5 and earlier, and possibly 3.2.6, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02122 Published 2009-06-12 No fix listed CWE-22

TI-2009-00459 CVE-2009-0479 · GHSA-cv4x-m683-q82c

Multiple SQL injection vulnerabilities in admin/admin_login.php in Online Grades 3.2.4…

LOW 35

Multiple SQL injection vulnerabilities in admin/admin_login.php in Online Grades 3.2.4 allow remote attackers to execute arbitrary SQL commands via the (1) uname or (2) pword parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00905 Published 2009-02-09 No fix listed CWE-89

TI-2009-00433 CVE-2009-0453 · GHSA-j497-c97x-m5qc

Online Grades 3.2.4 allows remote attackers to obtain configuration information via a…

LOW 28

Online Grades 3.2.4 allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02618 Published 2009-02-05 No fix listed CWE-200

TI-2009-00432 CVE-2009-0452 · GHSA-q6p7-fw64-xwwh

Multiple SQL injection vulnerabilities in parents/login.php in Online Grades 3.2.4, when…