← Database

CVE-2024-41236

HIGH CVSS: 7.2 Published: 2024-08-28 Modified: 2026-06-17

Description

A SQL injection vulnerability in /smsa/admin_login.php in Kashipara Responsive School Management System v3.2.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter of the Admin Login Page

Affected Platforms

Lopalopa Responsive School Management System

Weakness Type

CWE-89, CWE-89

References