Schoolbox Schoolbox
6 CVEs affecting Schoolbox Schoolbox. Latest disclosed: 2024-03-07. Critical: 0, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-28094 | High | 8.8 | 2024-03-07 | Chat functionality in Schoolbox application before version 23.1.3 is vulnerable to blind SQL Injection enabling the authenticated attackers to read, modify… |
CVE-2022-3059 | High | 8.6 | 2022-10-31 | The application was vulnerable to multiple instances of SQL injection (authenticated and unauthenticated) through a vulnerable parameter. Due to the stacked q… |
CVE-2022-39020 | High | 7.6 | 2022-10-31 | Multiple instances of XSS (stored and reflected) was found in the application. For example, features such as student assessment submission, file upload, news… |
CVE-2024-28097 | High | 7.3 | 2024-03-07 | Calendar functionality in Schoolbox application before version 23.1.3 is vulnerable to stored cross-site scripting allowing authenticated attacker to perform… |
CVE-2024-28096 | High | 7.3 | 2024-03-07 | Class functionality in Schoolbox application before version 23.1.3 is vulnerable to stored cross-site scripting allowing authenticated attacker to perform se… |
CVE-2024-28095 | High | 7.3 | 2024-03-07 | News functionality in Schoolbox application before version 23.1.3 is vulnerable to stored cross-site scripting allowing authenticated attacker to perform sec… |