CVE-2022-36193

SQL injection in School Management System 1.0 allows remote attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries.

Affected products

School Management System

Lahirudanushka School Management System

= 1.0

Fix

Available

CVSS 3.1

9.8 CRITICAL

EPSS

1.4% (71th percentile)

Weakness

CWE-89

NVD status

Modified

Published

2022-11-28