CVE-2020-37035CWE-89

e-learning Php Script 0.1.0 - 'search' SQL Injection

High · published January 30, 2026

CVSS v4.0
8.8
EPSS
0%
Percentile
34.0
In the wild
Unconfirmed
What it is

⚡ A crafty SQL injection vulnerability hides in the search function of e-Learning PHP Script 0.1.0! Just a sneaky input can let attackers run wild with your database! 🔥 Think of it like a restaurant that lets customers write their own orders on a blank ticket—without checking for anything suspicious! This means someone could order anything from the secret menu, potentially accessing data they shouldn't. If exploited, an attacker could manipulate your database queries, pulling sensitive information right out, modifying data, or even deleting records. It's like handing over the restaurant key to someone who could change the menu at will! The risk is high, so this vulnerability needs swift action!

Put simply

Think of it like a restaurant that lets customers write their own orders on a blank ticket—without checking for anything suspicious! This means someone could order anything from the secret menu, potentially accessing data they shouldn't. This SQL injection vulnerability allows attackers to exploit the 'search' parameter with unvalidated user input, enabling them to execute malicious SQL commands against the database.

What to do

If exploited, an attacker could manipulate your database queries, pulling sensitive information right out, modifying data, or even deleting records. It's like handing over the restaurant key to someone who could change the menu at will! The risk is high, so this vulnerability needs swift action! To protect your application, update to the patched version of e-Learning PHP Script if available, or implement strong input validation and prepared statements for the search functionality. Regularly audit your codebase for similar vulnerabilities! You've got this! Tackle that SQL injection head-on, and your security hero status will be activated! 🛡️

The record
Technical detail
CVSS v4.0
8.8 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00408 · 34.0th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2026-01-30T22:07Z
EPSS history
Timeline
  • 30 JAN 22:07Z
    e-learning Php Script 0.1.0 - 'search' SQL Injection
    cvelistv5