CVE-2021-28423

HIGH

Teachers Record Management System 1.0 - 'Multiple' SQL Injection (Authenticated)

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2021-28423 has a selected CVSS score of 8.8 (high); EIP currently links 1 catalogued exploit.

Description

Multiple SQL Injection vulnerabilities in Teachers Record Management System 1.0 thru 2.1 allow remote authenticated users to execute arbitrary SQL commands via the 'editid' GET parameter in edit-subjects-detail.php, edit-teacher-detail.php, or the 'searchdata' POST parameter in search.php.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBTeachers Record Management System 1.0 - 'Multiple' SQL Injection (Authenticated)ExploitDB exploitby nhattruongNot analyzed1 file
ExploitDB
PoC details

References

5