First published: Wed Feb 05 2025(Updated: )
SQL Injection vulnerability in SourceCodester Responsive E-Learning System 1.0 allows remote attackers to inject sql query in /elearning/delete_teacher_students.php?id= parameter via id field.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
SourceCodester Responsive E-Learning System |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-36084 is classified as a high severity vulnerability due to its potential impact on the database integrity.
Fix CVE-2020-36084 by validating and sanitizing user input for the id parameter in the /elearning/delete_teacher_students.php script.
CVE-2020-36084 is an SQL Injection vulnerability that allows attackers to manipulate SQL queries through unsanitized input.
CVE-2020-36084 affects SourceCodester Responsive E-Learning System version 1.0.
Yes, CVE-2020-36084 can be exploited remotely, allowing attackers to execute unauthorized SQL queries.