NetSight
high8.8

CVE-2024-28094

Chat functionality in Schoolbox application before version 23.1.3 is vulnerable to blind SQL Injection enabling the authenticated attackers to read, modify, an…

Impact

Chat functionality in Schoolbox application before version 23.1.3 is vulnerable to blind SQL Injection enabling the authenticated attackers to read, modify, and delete database records.

Affected products

VendorProductAffected versions
SchoolboxSchoolbox
before 23.1.3

Weakness classification

References