CVE:CVE-2020-36034
CNNVD:CNNVD-202308-1135
School Faculty Scheduling System是Carlo Montero个人开发者的一个学校教员调度系统。
School Faculty Scheduling System 1.0版本存在安全漏洞，该漏洞源于manage_user.php的参数id存在SQL注入漏洞。攻击者可利用该漏洞执行任意代码、提升权限、获取敏感信息。
solution:Upgrade school_faculty_scheduling_system_project school_faculty_scheduling_system to a higher version than 1.0,and avoid the version 1.0