PT-2023-10000 · Unknown · Aeharding Classroom-Engagement-System

Published 2023-01-12 · Updated 2024-05-17 · CVE-2013-10011

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions aeharding classroom-engagement-system (affected versions not specified)

Description A critical issue was found, allowing for SQL injection through some unknown functionality. The manipulation can be performed remotely.

Recommendations Apply the patch 096de5815c7b414e7339f3439522a446098fb73a to fix this issue.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2013-10011

Affected Products

Aeharding Classroom-Engagement-System

References · 5

• https://github.com/aeharding/classroom-engagement-system/commit/096de5815c7b414e7339f3439522a446098fb73a · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2013-10011 · Security Note
• https://vuldb.com/?ctiid.218156 · Note
• https://t.me/cibsecurity/56421 · Telegram Post
• https://vuldb.com/?id.218156 · Note