What’s Vulnerable › Vulnerabilities

CVE-2020-37035: e-learning Php Script 0.1.0 - 'search' SQL Injection

• Severity: high (CVSS 8.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-01-30 · updated 2026-06-17
• Weakness: CWE-89

Description

e-Learning PHP Script 0.1.0 contains a SQL injection vulnerability in the search functionality that allows attackers to manipulate database queries through unvalidated user input. Attackers can inject malicious SQL code in the 'search' parameter to potentially extract, modify, or access sensitive database information.

Affected products

• amitkolloldey e-learning PHP Script: 0.1.0

References

• https://github.com/amitkolloldey/elearning-script
• https://www.exploit-db.com/exploits/48629
• https://www.vulncheck.com/advisories/e-learning-php-script-search-sql-injection

Get alerted when CVE-2020-37035 or the next vulnerability affects your stack