PT-2019-7911 · Soa · School Management

Published 2019-05-09 · Updated 2019-05-13 · CVE-2017-12759

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SOA School Management version 3.0

Description The issue affects the SOA School Management system, allowing for SQL Injection. This can lead to code execution, which can be performed remotely.

Recommendations For SOA School Management version 3.0, consider applying input validation and sanitization to prevent SQL Injection attacks. As a temporary workaround, restrict access to sensitive database operations until a patch is available.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2017-12759

Affected Products

School Management

References · 5

• 🔥 https://exploit-db.com/exploits/42499 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-12759 · Security Note
• https://osv.dev/vulnerability/CVE-2017-12759 · Vendor Advisory
• http://demo.ynetinteractive.com/soa · Note
• http://soa.com · Note