CVE-2017-16561

Critical

Published: 07/11/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Ingenious School Management System version 2.3.0 is vulnerable to Boolean-based and Time-based SQL injection in the 'friend_index' parameter of a GET request in /view/friend_profile.php.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to database information, posing a serious threat to data security within the organization.

Recommendation

It is recommended to update the system to the latest version and implement input filtering and validation to minimize the risk of SQL injection attacks.

Original NVD description (English source)

/view/friend_profile.php in Ingenious School Management System 2.3.0 is vulnerable to Boolean-based and Time-based SQL injection in the 'friend_index' parameter of a GET request.