Legacy Advance
Monthly
SQL injection in the Giving Reports functionality of Ellucian Advance Web and Legacy Advance allows an authenticated attacker to extract sensitive information from databases. All versions of both products are affected; the class credit field is the injection point. A detailed technical write-up with exploit details is publicly available, though no active exploitation has been reported through CISA KEV.
SQL injection in the Giving Reports functionality of Ellucian Advance Web and Legacy Advance allows an authenticated attacker to extract sensitive information from databases. All versions of both products are affected; the class credit field is the injection point. A detailed technical write-up with exploit details is publicly available, though no active exploitation has been reported through CISA KEV.