CVE-2017-20196

CVSS 2.0 Score 6 of 10 (medium)

Details

Published Jan 26, 2025
Updated: Jan 28, 2025
CWE ID 74
CWE ID 89

Summary

CVE-2017-20196 is a critical vulnerability identified in Itechscripts School Management Software version 2.75. This issue affects an unspecified section of the file /notice-edit.php and allows for SQL injection attacks. The manipulation of the aid argument can be exploited remotely, making this a significant security risk. The public disclosure of the exploit increases the potential for malicious actors to take advantage of this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share