Description
Chat functionality in Schoolbox application before
version 23.1.3 is vulnerable to blind SQL Injection enabling the
authenticated attackers to read, modify, and delete database records.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schoolbox Pty | Schoolbox | < 23.1.3 | 23.1.3 |