CVE-2020-36084

SQL Injection vulnerability in SourceCodester Responsive E-Learning System 1.0 allows remote attackers to inject sql query in /elearning/delete_teacher_students.php?id= parameter via id field.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.72% chance of exploitation in the next 30 days, 51th percentile

Published

2025-02-05

Updated

2025-02-06

Proof-of-concept exploits (1)

• https://www.exploit-db.com/exploits/49357

References

• CVE Record
• NVD entry

Related

• CVE-2020-36079
• CVE-2020-36109
• CVE-2020-36066
• CVE-2020-36112
• CVE-2020-36065
• CVE-2020-36115