CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla School Management allows Blind SQL Injection. This issue affects School Management: from n/a through 92.0.0.
Explanation of Vulnerability in Simple Terms
School Management for Joomla contains a SQL injection vulnerability in versions up to 92.0.0. An attacker can inject malicious SQL commands through unfiltered input to read or modify database contents. No authentication is required, and the vulnerability can affect the entire Joomla installation. Update to a version newer than 92.0.0 immediately.
What an attacker can do
Read or modify any data in the Joomla database without authentication.
Potential impact on your site
Attackers can steal user credentials, modify content, or disable the site without needing a password.
Conditions required to exploit
Network access to the Joomla site; no login required.
Key dates
External resources
Related vulnerabilities
