VULNERABILITY INTELLIGENCE

CVE-2024-37840

CVSS score8.8 HIGH
EPSS probability0.54%
CISA KEVNot currently listed
Published2024-06-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

SQL injection vulnerability in processscore.php in Itsourcecode Learning Management System Project In PHP With Source Code v1.0 allows remote attackers to execute arbitrary SQL commands via the LessonID parameter.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-89

Primary references