Threats tagged 'ghsa-pw6f-w552-vgq4'

A SQL injection vulnerability exists in the sumiie24 School-Management-System in the parent_Login.php file within the Public Search Feature. The flaw allows remote attackers to manipulate the email argument to execute SQL injection attacks. The product uses a rolling release system, so specific affected or fixed versions are not disclosed. The vendor did not respond to early disclosure attempts. Exploit code has been published, and the vulnerability has a CVSS score of 7.3, indicating high severity.