Lucene search
TMLCVELIST:CVE-2024-28094HistoryMar 07, 2024 - 3:14 a.m.
CVE-2024-28094 Blind SQL Injection in Chat functionality in Schoolbox
2024-03-0703:14:25
CWE-89
TML
www.cve.org
3
sql injection
schoolbox
chat functionality
cve-2024-28094
database security
authentication
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
9.3
Confidence
High
EPSS
0
Percentile
9.0%
Chat functionality in Schoolbox application before
version 23.1.3 is vulnerable to blind SQL Injection enabling the
authenticated attackers to read, modify, and delete database records.
CNA Affected
[
{
"defaultStatus": "affected",
"product": "Schoolbox",
"vendor": "Schoolbox Pty Ltd",
"versions": [
{
"lessThan": "23.1.3",
"status": "affected",
"version": "0",
"versionType": "Minor"
}
]
}
]Related
prion
prion
Sql injection
2024-03-07 04:15:00
nvd
nvd
CVE-2024-28094
2024-03-07 04:15:07
vulnrichment
vulnrichment
CVE-2024-28094 Blind SQL Injection in Chat functionality in Schoolbox
2024-03-07 03:14:25
cve
cve
CVE-2024-28094
2024-03-07 04:15:07
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
9.3
Confidence
High
EPSS
0
Percentile
9.0%
Related for CVELIST:CVE-2024-28094