← Back

Ingenious School Management System

ingenious_school_management_system

Vendor: Ingenious School Management System Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-16561
1Ingenious School Management System Project
1Ingenious School Management System
May 13, 2026
Nov 7, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
/view/friend_profile.php in Ingenious School Management System 2.3.0 is vulnerable to Boolean-based and Time-based SQL injection in the 'friend_index' parameter of a GET request.
CVE-2017-15957
1Ingenious School Management System Project
1Ingenious School Management System
May 13, 2026
Oct 29, 2017
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
my_profile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file.