vendor:
Schoolhos CMS
by:
Cumi++
7,5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Schoolhos CMS
Affected Version From: Beta 2.29
Affected Version To: Beta 2.29
Patch Exists: NO
Related CWE: N/A
CPE: a:schoolhos:schoolhos_cms
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Ubuntu 12.04
2012
Schoolhos CMS SQL Injections
Schoolhos is an education and e-learning CMS, have used by more school. An attacker can exploit a SQL injection vulnerability in Schoolhos CMS Beta 2.29 to execute arbitrary SQL commands by sending a specially crafted HTTP request containing malicious SQL statements.
Mitigation:
Input validation and parameterized queries can be used to prevent SQL injection attacks.