Schoolmate Project Schoolmate — known CVE vulnerabilities

Every CVE whose affected-product data names Schoolmate Project Schoolmate, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2023-39850 — CVSS 9.8 (critical): Schoolmate v1.3 was discovered to contain multiple SQL injection vulnerabilities via the $courseid and $teacherid parameters at…
• CVE-2023-40944 — CVSS 9.8 (critical): Schoolmate 1.3 is vulnerable to SQL Injection in the variable $schoolname from Database at ~\header.php.
• CVE-2023-40946 — CVSS 9.8 (critical): Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php.