CVE:CVE-2022-2706
CNNVD:CNNVD-202208-2420
Online Class and Exam Scheduling System是一款在线课程和考试安排系统。
Online Class and Exam Scheduling System 1.0存在SQL注入漏洞，该漏洞源于文件/pages/class_sched.php的未知函数受到影响。操作参数class会导致sql注入。攻击可以远程发起，该漏洞利用已向公众披露并可能被使用。
solution:Upgrade online_class_and_exam_scheduling_system_project online_class_and_exam_scheduling_system to a higher version than 1.0,and avoid the version 1.0