CVE-2018-7477 – School Management Script 3.0.4 - Authentication Bypass

https://notcve.org/view.php?id=CVE-2018-7477

SQL Injection exists in PHP Scripts Mall School Management Script 3.0.4 via the Username and Password fields to parents/Parent_module/parent_login.php. Existe inyección SQL en PHP Scripts Mall School Management Script 3.0.4 mediante los campos Username y Password en parents/Parent_module/parent_login.php. School Management Script version 3.0.4 suffers from a remote SQL injection vulnerability that allows for authentication bypass. • https://www.exploit-db.com/exploits/44191 https://exploit-db.com/exploits/44191 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •