Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2020-10505

ALLE INFORMATION CO., LTD. School Manage System - SQL Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of SQL Injection, an attacker can use a union based injection query string to get databases schema and username/password.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ALLE INFORMATION CO., LTD. School Manage System

  • before 2020affected

References