Online Grades
Approved changes feed: RSS · Atom
cpe:2.3:a:onlinegrades:online_grades:3.2.4:*:*:*:*:*:*:*part: a version: 3.2.4 update: *
| Vendor | Onlinegrades (2d2aa162-27f9-5307-b290-e2407ff7a757) |
|---|---|
| Product | Online Grades (81778b3b-b776-569a-9e25-26d057ef5e69) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-2037 |
vulnerable | 2026-06-08 04:51:26.167286 |
Details available
Multiple directory traversal vulnerabilities in Online Grades & Attendance 3.2.5 and earlier, and possibly 3.2.6, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) GLOBALS[SKIN] parameter to index.php and the (2) skin parameter to admin/admin.php.
Published: 2009-06-12T17:28:00.000Z
Updated: 2024-08-07T05:36:20.720Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-0479 |
vulnerable | 2026-06-08 04:51:09.593295 |
Details available
Multiple SQL injection vulnerabilities in admin/admin_login.php in Online Grades 3.2.4 allow remote attackers to execute arbitrary SQL commands via the (1) uname or (2) pword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Published: 2009-02-09T01:00:00.000Z
Updated: 2024-09-17T02:57:58.777Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-0453 |
vulnerable | 2026-06-08 04:51:09.534779 |
Details available
Online Grades 3.2.4 allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.
Published: 2009-02-05T20:00:00.000Z
Updated: 2024-08-07T04:31:26.227Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-0452 |
vulnerable | 2026-06-08 04:51:09.534383 |
Details available
Multiple SQL injection vulnerabilities in parents/login.php in Online Grades 3.2.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) uname or (2) pass parameter.
Published: 2009-02-05T20:00:00.000Z
Updated: 2024-08-07T04:31:26.231Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.