CVE-2021-28423 in Teachersrecordmanagementsystemproject and PHPGurukul Products
Published on July 1, 2021
Multiple SQL Injection vulnerabilities in Teachers Record Management System 1.0 thru 2.1 allow remote authenticated users to execute arbitrary SQL commands via the 'editid' GET parameter in edit-subjects-detail.php, edit-teacher-detail.php, or the 'searchdata' POST parameter in search.php.
Products Associated with CVE-2021-28423
stack.watch emails you whenever new vulnerabilities are published in Teachersrecordmanagementsystemproject Teachers Record Management System or PHPGurukul Teachers Record Management System. Just hit a watch button to start following.
Exploit Probability
EPSS
1.72%
Percentile
82.16%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.