CVE-2023-3094 (published 2023-06-04T09:00:04.748Z)
A vulnerability classified as critical has been found in code-projects Agro-School Management System 1.0. Affected is the function doUpdateQuestion of the file btn_functions.php. The manipulation of the argument question_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-230670 is the identifier assigned to this vulnerability.
Affected products: Vendor: code-projects
Product: Agro-School Management System
Versions: 1.0