PT-2024-34424
CVE-2024-50826
·
تاريخ النشر
2024-11-14
·
تاريخ التحديث
2024-11-18
الوصف من
CVSS 3.1
7.2
عاليةالمقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
kashipara E-learning Management System Project version 1.0
Description:
A SQL Injection issue was found in the /admin/add content.php endpoint via the
title and content parameters.Recommendations:
For version 1.0, consider restricting access to the /admin/add content.php endpoint until a patch is available, and avoid using the
title and content parameters in this endpoint to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾