Description
SQL Injection vulnerability in Eskooly Web Product v.3.0 allows a remote attacker to execute arbitrary code via the searchby parameter of the allstudents.php component and the id parameter of the requestmanager.php component.
Critical · 9.8
CVE-2024-27709
EUVD-2024-24903GHSA-pffg-mp75-j28h
SQL Injection vulnerability in Eskooly Web Product v.3.0 allows a remote attacker to execute arbitrary code via the searchby parameter of t…
Published Jul 5, 2024 · Updated Aug 2, 2024 · Assigned by mitre