CVE-2024-37840

Description

SQL injection vulnerability in processscore.php in Itsourcecode Learning Management System Project In PHP With Source Code v1.0 allows remote attackers to execute arbitrary SQL commands via the LessonID parameter.

References

https://github.com/ganzhi-qcy/cve/issues/4

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-36842

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS