Description
eClass platform < ip.2.5.10.2.1 allows an attacker to execute SQL command via /admin/academic/studenview_left.php StudentID parameter.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BroadLearning | eclass | ip – < 2.25.10.2.1 | 2.25.10.2.1 |
Critical · 9.8
CVE-2019-9885
EUVD-2019-19241GHSA-xvj9-g93g-8ggp
eClass platform contains a SQL injection vulnerability
Published Jul 25, 2019 · Updated Sep 17, 2024 · Assigned by twcert