Dino Physics School Assistant Project vulnerabilities
We track 6 vulnerabilities in Dino Physics School Assistant Project products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on May 30, 2024.
Latest Dino Physics School Assistant Project vulnerabilities
- 9.8 Critical severity
dino_physics_school_assistant: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=view_item. Manipulating the argument id can result in SQL injection.
- 9.8 Critical severity
dino_physics_school_assistant: Incorrect Authorization
A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Users.php?f=save. Manipulating the argument id can result in improper authorization.
- 9.8 Critical severity
dino_physics_school_assistant: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/?page=borrow/view_borrow. Manipulating the argument id can result in SQL injection.
- 9.8 Critical severity
dino_physics_school_assistant: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/category/view_category.php. Manipulating the argument id can result in SQL injection.
- 9.8 Critical severity
dino_physics_school_assistant: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=delete_category. Manipulating the argument id can result in SQL injection.
- 9.8 Critical severity
dino_physics_school_assistant: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=save_category. Manipulating the argument id can result in SQL injection.