PT-2019-7911 · Soa · School Management
CVE-2017-12759
·
Publicado
2019-05-09
·
Atualizado
2019-05-13
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
SOA School Management version 3.0
Description
The issue affects the SOA School Management system, allowing for SQL Injection. This can lead to code execution, which can be performed remotely.
Recommendations
For SOA School Management version 3.0, consider applying input validation and sanitization to prevent SQL Injection attacks. As a temporary workaround, restrict access to sensitive database operations until a patch is available.
Exploit
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
School Management