Schoolbox Pty vulnerabilities
We track 2 vulnerabilities in Schoolbox Pty products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 7, 2024.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest Schoolbox Pty vulnerabilities
- 8.8 High severity
Schoolbox: Improper Neutralization of Special Elements used in an SQL Command
Chat functionality in Schoolbox application before version 23.1.3 is vulnerable to blind SQL Injection enabling the authenticated attackers to read, modify, and delete database records.
- 7.5 High severity
Schoolbox: Improper Neutralization of Special Elements used in an SQL Command
The application was vulnerable to multiple instances of SQL injection (authenticated and unauthenticated) through a vulnerable parameter. Due to the stacked query support, complex SQL commands could be crafted and injected into the vulnerable parameter and usi