vendor:
Classmate Script
by:
Stack
9
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Classmate Script
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
Availscript Classmate Script Remote SQL Injection Vulnerability
Availscript Classmate Script is prone to a remote SQL injection vulnerability. An attacker can exploit this issue to manipulate SQL queries and gain access to sensitive information that may lead to further attacks. The attacker can also gain access to the administrator account by exploiting this issue.
Mitigation:
The vendor has released a patch to address this issue. Users are advised to upgrade to the latest version.