dino_physics_school_assistant vulnerabilities
6 known vulnerabilities in dino_physics_school_assistant from Dino Physics School Assistant Project. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
dino_physics_school_assistant: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=view_item. Manipulating the argument id can result in SQL injection.
- 9.8 Critical severity
dino_physics_school_assistant: Incorrect Authorization
A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Users.php?f=save. Manipulating the argument id can result in improper authorization.
- 9.8 Critical severity
dino_physics_school_assistant: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/?page=borrow/view_borrow. Manipulating the argument id can result in SQL injection.
- 9.8 Critical severity
dino_physics_school_assistant: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/category/view_category.php. Manipulating the argument id can result in SQL injection.
- 9.8 Critical severity
dino_physics_school_assistant: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=delete_category. Manipulating the argument id can result in SQL injection.
- 9.8 Critical severity
dino_physics_school_assistant: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=save_category. Manipulating the argument id can result in SQL injection.