Description (CNA)
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'view' in 'Attendance' and 'YearLevel' in '/AttendanceMonitoring/report/attendance_print.php' parameter.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Janobe / School Attendance Monitoring System | affected 1.0 |
| Janobe / chool Event Management System | affected 1.0 |
CWE
CWE-89
References
ADP enrichment
No English description supplied.
No references supplied.