← CVE Intelligence

CVE-2024-28094

Blind SQL Injection in Chat functionality in Schoolbox PUBLISHED

Description (CNA)

Chat functionality in Schoolbox application before version 23.1.3 is vulnerable to blind SQL Injection enabling the authenticated attackers to read, modify, and delete database records.

Affected (CNA)

Vendor / productVersions
Schoolbox Pty Ltd / Schoolboxaffected 0 before 23.1.3

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.