Eskooly vulnerabilities
We track 5 vulnerabilities in Eskooly products across 3 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on July 5, 2024.
Latest Eskooly vulnerabilities
- 8.2 High severity
web_product: Unverified Password Change
An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via a crafted request to the Password Change mechanism.
- 8.8 High severity
web_product: Protection Mechanism Failure
An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the HTTP Response Header Settings component.
- 8.8 High severity
free_online_school_management_software: Improper Privilege Management
An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the Sin-up process function in the account settings.
- 9.8 Critical severity
free_online_school_management_software: Improper Privilege Management
An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the authentication mechanism.
- 9.8 Critical severity
web_product: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Eskooly Web Product v.3.0 allows a remote attacker to execute arbitrary code via the searchby parameter of the allstudents.php component and the id parameter of the requestmanager.php component.