CVE Database
/

CVE-2014-9127

Back to search

CVE-2014-9127

Published: Feb 8, 2020

Modified: Aug 6, 2024

PUBLISHED

Description

Open-School Community Edition 2.2 does not properly restrict access to the export functionality, which allows remote authenticated users to obtain sensitive information via the r parameter with the value export to index.php.

VendorProductVersions

n/a

n/a

affected
n/a

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now