PT-2023-10000 · Unknown · Aeharding Classroom-Engagement-System

CVE-2013-10011 · Publicado 2023-01-12 · Atualizado 2024-05-17

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions aeharding classroom-engagement-system (affected versions not specified)

Description A critical issue was found, allowing for SQL injection through some unknown functionality. The manipulation can be performed remotely.

Recommendations Apply the patch 096de5815c7b414e7339f3439522a446098fb73a to fix this issue.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2013-10011

Produtos afetados

Aeharding Classroom-Engagement-System

Referências · 5

• https://github.com/aeharding/classroom-engagement-system/commit/096de5815c7b414e7339f3439522a446098fb73a · Correção
• https://vuldb.com/?ctiid.218156 · Nota
• https://t.me/cibsecurity/56421 · Publicação no Telegram
• https://vuldb.com/?id.218156 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-10011 · Nota de Segurança