Description (CNA)
A vulnerability was determined in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. This vulnerability affects unknown code of the file /Profilers/PriProfile/COUNT2.php. This manipulation of the argument cname causes sql injection. The attack may be initiated remotely. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| kidaze / CourseSelectionSystem | affected 42cd892b40a18d50bd4ed1905fa89f939173a464 |
CWE
CWE-89, CWE-74
References
- https://vuldb.com/?id.324614
- https://vuldb.com/?ctiid.324614
- https://vuldb.com/?submit.649316
- https://github.com/shang-hh/shang/blob/main/sql.txt
ADP enrichment
No English description supplied.