Description
Open-School 3.0, and Community Edition 2.3, allows SQL Injection via the index.php?r=students/students/document id parameter.
Unscored
CVE-2019-14754
EUVD-2019-5893GHSA-fp2x-m8qc-prrx
Open-School 3.0, and Community Edition 2.3, allows SQL Injection via the index.php?r=students/students/document id parameter.
Published Aug 8, 2019 · Updated Aug 5, 2024 · Assigned by mitre