What is CVE-2020-36034?

CVE-2020-36034 is a critical-severity vulnerability in School Faculty Scheduling System Project, classified under SQL Injection. CVSS score: 9.8/10. Published 2023-08-11.

How severe is CVE-2020-36034?

Critical severity. CVSS v3 base score is 9.8 out of 10.

SQL Injection in School Faculty Scheduling System Project

CVE-2020-36034

SQL Injection vulnerability in oretnom23 School Faculty Scheduling System version 1.0, allows remote attacker to execute arbitrary code, escalate privilieges, and gain sensitive information via crafted payload to id parameter in manage_user.php.

Vulnerability class: SQL Injection

EPSS: 0.013 (68.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

School_faculty_scheduling_system_project School_faculty_scheduling_system — versions 1.0
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (Product)
cve@mitre.org (Exploit, Third Party Advisory)
cve@mitre.org (Product)

Frequently asked questions

What is CVE-2020-36034?: CVE-2020-36034 is a critical-severity vulnerability in School Faculty Scheduling System Project, classified under SQL Injection. CVSS score: 9.8/10. Published 2023-08-11.
How severe is CVE-2020-36034?: Critical severity. CVSS v3 base score is 9.8 out of 10.