VULNERABILITY INTELLIGENCE

CVE-2024-37870

CVSS score9.8 CRITICAL

EPSS probability0.49%

CISA KEVNot currently listed

Published2024-07-09

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

SQL injection vulnerability in processscore.php in Learning Management System Project In PHP With Source Code 1.0 allows attackers to execute arbitrary SQL commands via the id parameter.

Weakness classification

134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-89

Primary references

cve@mitre.org — Exploit, Issue Tracking, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking, Third Party Advisory