Unscored CVE-2014-1455 EUVD-2014-1531GHSA-9cwm-xxr8-vw8q

SQL injection vulnerability in the password reset functionality in Pearson eSIS Enterprise Student Information System, possibly 3.3.0.13 an…

Published Apr 10, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

SQL injection vulnerability in the password reset functionality in Pearson eSIS Enterprise Student Information System, possibly 3.3.0.13 and earlier, allows remote attackers to execute arbitrary SQL commands via the new password.

References

66689 vdb-entry
20140406 Pearson eSIS Enterprise Student Information System SQL Injection mailing-list