Vulnerabilities > Schoolmate Project

DATE CVE VULNERABILITY TITLE RISK
2023-09-11 CVE-2023-40944 SQL Injection vulnerability in Schoolmate Project Schoolmate 1.3
Schoolmate 1.3 is vulnerable to SQL Injection in the variable $schoolname from Database at ~\header.php.
network
low complexity
schoolmate-project CWE-89
critical
9.8
2023-09-11 CVE-2023-40946 SQL Injection vulnerability in Schoolmate Project Schoolmate 1.3
Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php.
network
low complexity
schoolmate-project CWE-89
critical
9.8
2023-08-15 CVE-2023-39850 SQL Injection vulnerability in Schoolmate Project Schoolmate 1.3
Schoolmate v1.3 was discovered to contain multiple SQL injection vulnerabilities via the $courseid and $teacherid parameters at DeleteFunctions.php.
network
low complexity
schoolmate-project CWE-89
critical
9.8