CVE-2024-28094

Published Mar 7, 2024

Last updated 8 months ago

Overview

Description
Chat functionality in Schoolbox application before version 23.1.3 is vulnerable to blind SQL Injection enabling the authenticated attackers to read, modify, and delete database records.
Source
vdp@themissinglink.com.au
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
8.8
Impact score
5.9
Exploitability score
2.8
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity
HIGH

Weaknesses

vdp@themissinglink.com.au
CWE-89

Social media

Hype score
Not currently trending

References