CVE-2023-39850

CriticalCVSS 9.8

Published: 15/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.71%

49th percentile - higher than 49% of all known CVEs

Summary

Version 1.3 of Schoolmate was found to contain multiple SQL injection vulnerabilities via the $courseid and $teacherid parameters in DeleteFunctions.php.

Risk Assessment

Exploitation of these vulnerabilities could lead to unauthorized access to the database and exposure of sensitive information.

Recommendation

It is recommended to update the application to the latest version and implement input validation to prevent SQL injection.

Original NVD description (English source)

Schoolmate v1.3 was discovered to contain multiple SQL injection vulnerabilities via the $courseid and $teacherid parameters at DeleteFunctions.php.