Schoolbox vulnerabilities

2 known vulnerabilities in Schoolbox from Schoolbox Pty. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Schoolbox: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-28094Mar 7, 2024Schoolbox Pty

  Chat functionality in Schoolbox application before version 23.1.3 is vulnerable to blind SQL Injection enabling the authenticated attackers to read, modify, and delete database records.

• 7.5 High severity

  Schoolbox: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-3059Oct 31, 2022Schoolbox Pty

  The application was vulnerable to multiple instances of SQL injection (authenticated and unauthenticated) through a vulnerable parameter. Due to the stacked query support, complex SQL commands could be crafted and injected into the vulnerable parameter and usi