CVE-2017-16561

/view/friend_profile.php in Ingenious School Management System 2.3.0 is vulnerable to Boolean-based and Time-based SQL injection in the 'friend_index' parameter of a GET request.

• CWE-89

• https://www.exploit-db.com/exploits/43108/Exploit, Issue Tracking, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/43108/Exploit, Issue Tracking, Third Party Advisory, VDB Entry

Published

Nov 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-16554K7 Antivirus Premium before 15.1.0.53 allows local users to …
• CVE-2017-16555K7 Antivirus Premium before 15.1.0.53 allows local users to …
• CVE-2017-16556In K7 Antivirus Premium before 15.1.0.53, user-controlled in…
• CVE-2017-16557K7 Antivirus Premium before 15.1.0.53 allows local users to …
• CVE-2017-16558Contao 3.0.0 to 3.5.30 and 4.0.0 to 4.4.7 contains an SQL in…
• CVE-2017-16560SanDisk Secure Access 3.01 vault decrypts and copies encrypt…
• CVE-2017-16562The UserPro plugin before 4.9.17.1 for WordPress, when used …
• CVE-2017-16563Cross-Site Request Forgery (CSRF) in the Basic Settings scre…
• CVE-2017-16564Stored Cross-site scripting (XSS) vulnerability in /cgi-bin/…
• CVE-2017-16565Cross-Site Request Forgery (CSRF) in /cgi-bin/login on Vonag…
• CVE-2017-16566On Jooan IP Camera A5 2.3.36 devices, an insecure FTP server…9.8
• CVE-2017-16567Persistent Cross-Site Scripting (XSS) vulnerability in Logit…5.4