web_product vulnerabilities

3 known vulnerabilities in web_product from Eskooly. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  web_product: Unverified Password Change

  CVE-2024-27715Jul 5, 2024Eskooly

  An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via a crafted request to the Password Change mechanism.

• 8.8 High severity

  web_product: Protection Mechanism Failure

  CVE-2024-27713Jul 5, 2024Eskooly

  An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the HTTP Response Header Settings component.

• 9.8 Critical severity

  web_product: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-27709Jul 5, 2024Eskooly

  SQL Injection vulnerability in Eskooly Web Product v.3.0 allows a remote attacker to execute arbitrary code via the searchby parameter of the allstudents.php component and the id parameter of the requestmanager.php component.