We’re taking on a small number of new builds and rebuilds this quarter. Book a call to see if your project is a fit.

CVE CVE-2020-37035

CVE-2020-37035

PHP

Severity: HIGH
CVSS: 8.2CVSS
Published: 2026-01-30
Last modified: 2026-02-03
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CWE: CWE-89

Description

e-Learning PHP Script 0.1.0 contains a SQL injection vulnerability in the search functionality that allows attackers to manipulate database queries through unvalidated user input. Attackers can inject malicious SQL code in the 'search' parameter to potentially extract, modify, or access sensitive database information.

References

https://github.com/amitkolloldey/elearning-script
https://www.exploit-db.com/exploits/48629
https://www.vulncheck.com/advisories/e-learning-php-script-search-sql-injection

Summary

Description

References