CVE-2019-9885

Severity

CRITICAL

CVSS

9.8

EPSS

0.02624

Risk score

40.12

CISA KEV

PoC

Published

2019-07-25

Modified

2024-09-17

First seen

2026-08-07

Aliases

EUVD-2019-19241, GHSA-XVJ9-G93G-8GGP

Products

BroadLearning:eclass ip <2.25.10.2.1

Sources

eClass platform < ip.2.5.10.2.1 allows an attacker to execute SQL command via /admin/academic/studenview_left.php StudentID parameter.