Vulnerabilities

TI-2023-21625 CVE-2023-40946 · GHSA-9j5r-c373-j3c7

Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php.

HIGH 82

Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00752 Published 2023-09-11 No fix listed CWE-89

TI-2023-21623 CVE-2023-40944 · GHSA-j8hf-frfj-vx5m

HIGH 82

Schoolmate 1.3 is vulnerable to SQL Injection in the variable $schoolname from Database at ~\header.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00752 Published 2023-09-11 No fix listed CWE-89

TI-2023-20801 CVE-2023-39850 · GHSA-vhf8-vm9f-cqr6

HIGH 82

Schoolmate v1.3 was discovered to contain multiple SQL injection vulnerabilities via the $courseid and $teacherid parameters at DeleteFunctions.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00846 Published 2023-08-15 No fix listed CWE-89