Unscored CVE-2021-26822 EUVD-2021-13607GHSA-fvqh-qwm3-5j87

Teachers Record Management System 1.0 is affected by a SQL injection vulnerability in 'searchteacher' POST parameter in search-teacher.php.…

Published Feb 15, 2021 · Updated Aug 3, 2024 · Assigned by mitre

Description

Teachers Record Management System 1.0 is affected by a SQL injection vulnerability in 'searchteacher' POST parameter in search-teacher.php. This vulnerability can be exploited by a remote unauthenticated attacker to leak sensitive information and perform code execution attacks.

References

https://phpgurukul.com/teachers-record-management-system-using-php-and-mysql/
https://www.exploit-db.com/exploits/49562
https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-26822