CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mojoomla School Management allows SQL Injection. This issue affects School Management: from n/a through 93.2.0.
Explanation of Vulnerability in Simple Terms
School Management for Joomla contains a SQL injection vulnerability in versions up to 93.2.0. An authenticated administrator can inject malicious SQL commands through unfiltered input, potentially reading sensitive database records. The vulnerability requires high-level admin privileges and does not allow data modification or site takeover, but can expose confidential information and cause partial service disruption.
What an attacker can do
Read sensitive data from the site's database by injecting SQL commands.
Potential impact on your site
A malicious admin can extract confidential data from your database, including user credentials and private records.
Conditions required to exploit
Attacker must have administrator-level access to the Joomla site.
Key dates
External resources
Related vulnerabilities
