Description
A vulnerability was found in code-projects Simple Scheduling System 1.0. This affects an unknown part of the file /add.home.php. The manipulation of the argument faculty results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used. Other parameters might be affected as well.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| code-projects | Simple Scheduling System | 1.0 | — |
References
- VDB-326197 | code-projects Simple Scheduling System add.home.php sql injection vdb-entry technical-description
- VDB-326197 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #662701 | code-projects Simple Scheduling System V1.0 SQL Injection third-party-advisory
- https://github.com/yihaofuweng/cve/issues/42 exploit issue-tracking
- https://code-projects.org/ product