Onlinegrades operates a focused educational-software product centered on online grade management and student-tracking functionality that serves schools and districts. The vulnerability profile concentrates on application-layer input-handling and access-control issues, including SQL injection, sensitive-information exposure, and path-traversal flaws that are typical of web-facing administrative platforms handling student data. Current vulnerability counts, severity, and exploitation status are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Onlinegrades over time
Signals from CVEs in this vendor scope (5 CVEs).
5 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2009-0479HIGH Multiple SQL injection vulnerabilities in admin/admin_login.php in Online Grades 3.2.4 allow remote attackers to execute arbitrary SQL commands via the (1) uname or (2) pword param | Feb 9, 2009 | 7.5 | 28 | NO | YES |
CVE-2009-2037MEDIUM Multiple directory traversal vulnerabilities in Online Grades & Attendance 3.2.5 and earlier, and possibly 3.2.6, when register_globals is enabled, allow remote attackers to includ | Jun 12, 2009 | 6.8 | 27 | NO | YES |
CVE-2009-0452MEDIUM Multiple SQL injection vulnerabilities in parents/login.php in Online Grades 3.2.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via | Feb 10, 2009 | 6.8 | 27 | NO | YES |
CVE-2009-2598MEDIUM Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow (1) remote attackers to execute arbitrary SQL commands via the key parameter in a reset | Jul 27, 2009 | 6.5 | 25 | NO | YES |
CVE-2009-0453MEDIUM Online Grades 3.2.4 allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function. | Feb 10, 2009 | 5.0 | 23 | NO | YES |
Signals from CVEs in this vendor scope (5 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Onlinegrades.
Media articles that mention a CVE ID that affects a product developed by Onlinegrades — matched by CVE ID, not by vendor name.