E-Learning System 1.0 - SQL Injection
E-Learning System 1.0 contains an unauthenticated SQL injection caused by unsanitized input, letting remote attackers execute arbitrary code on the server and gain a reverse shell, exploit requires no authentication. References: https://www.exploit-db.com/exploits/49434 https://nvd.nist.gov/vuln/detail/CVE-2021-3239 Remediation: Apply input validation and parameterized queries, update to the latest version if available.
url