Vulnerabilities

TI-2008-06309 CVE-2008-6619 · GHSA-2x96-rv57-c9rf

Unrestricted file upload vulnerability in class/ApplyDB.php in ClassSystem 2.3 allows…

LOW 37

Unrestricted file upload vulnerability in class/ApplyDB.php in ClassSystem 2.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04055 Published 2009-04-06 No fix listed CWE-264

TI-2008-06308 CVE-2008-6618 · GHSA-683p-j88j-jvf2

Multiple SQL injection vulnerabilities in ClassSystem 2.3 allow remote attackers to…

LOW 37

Multiple SQL injection vulnerabilities in ClassSystem 2.3 allow remote attackers to execute arbitrary SQL commands via the teacher_id parameter in (1) class/HomepageMain.php and (2) class/HomepageTop.php, and (3) the mes…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01909 Published 2009-04-06 No fix listed CWE-89

Vulnerabilities

Filters

Unrestricted file upload vulnerability in class/ApplyDB.php in ClassSystem 2.3 allows…

Multiple SQL injection vulnerabilities in ClassSystem 2.3 allow remote attackers to…