Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
/view/friend_profile.php in Ingenious School Management System 2.3.0 is vulnerable to Boolean-based and Time-based SQL injection in the 'friend_index' parameter of a GET request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ingenious School Management System SQL注入漏洞
Vulnerability Description
Ingenious School Management System是一套基于Web的学校管理系统。该系统支持课程添加、成绩公布和教师管理等功能。 Ingenious School Management System 2.3.0版本中的/view/friend_profile.php文件存在SQL注入漏洞。远程攻击者可利用该漏洞向GET请求中的‘friend_index’参数注入SQL命令。
CVSS Information
N/A
Vulnerability Type
N/A