Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
ATutor 2.2.4 contains a SQL injection vulnerability in the admin user deletion page that allows authenticated attackers to manipulate database queries through the 'id' parameter. Attackers can exploit the vulnerability by injecting malicious SQL code into the 'id' parameter of the admin_delete.php script to potentially extract or modify database information.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2020-37147 ATutor 2.2.4 contains a SQL injection vulnerability in the admin user deletion page that allows authenticated attackers to manipulate database queries through the 'id… https://www.cve.org/CVERecord?id=CVE-2020-37147
Post summary
The post outlines a SQL injection flaw in ATutor 2.2.4’s admin user deletion page that allows authenticated users to manipulate database queries.
CVE-2020-37147 (CVSS:7.0, HIGH) is Awaiting Analysis. ATutor 2.2.4 contains a SQL injection vulnerability in the admin user deletion page that allows authenticated attackers ..https://nvd.nist.gov/vuln/detail/CVE-2020-37147 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
ATutor 2.2.4 is reported to have a SQL injection vulnerability (CVE‑2020‑37147) in the admin user deletion page, with CVSS 7.0 and awaiting analysis; no PoC, exploit, or patch is mentioned.