Skip to content

CVE-2017-16561 /view/friend_profile.php in Ingenious School Management System 2.3.0 is vulnerable to Boolean-based and Time-based SQL injection in the 'friend_index' parameter of a GET request.

CriticalCVSS 9.8 EPSS 1.4%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

/view/friend_profile.php in Ingenious School Management System 2.3.0 is vulnerable to Boolean-based and Time-based SQL injection in the 'friend_index' parameter of a GET request.

Affected products

ProductAffected versionsFixed in
ingenious school management system project ingenious school management system = 2.3.0 No fix listed

References

  • 43108 exploit issue-tracking third-party-advisory vdb-entry