{"metadata": {"vulnerability": "ghsa-r793-4q47-gmj4", "count": 13, "kinds": {"milestone": 3, "sighting": 1, "kev": 0, "other": 9}}, "data": [{"timestamp": "2017-01-11T01:00:00Z", "date_only": false, "value": "2017-01-11T01:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 \u00b7 CVE-2017-20196 / VulDB", "record": "CVE-2017-20196", "field": "containers.cna.timeline.0.time", "text": "Advisory disclosed", "linked_record": true}, {"timestamp": "2017-01-13T01:00:00Z", "date_only": false, "value": "2017-01-13T01:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 \u00b7 CVE-2017-20196 / VulDB", "record": "CVE-2017-20196", "field": "containers.cna.timeline.3.time", "text": "VulDB entry created", "linked_record": true}, {"timestamp": "2025-01-24T10:02:48.356Z", "date_only": false, "value": "2025-01-24T10:02:48.356Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2017-20196", "record": "CVE-2017-20196", "field": "cveMetadata.dateReserved", "linked_record": true}, {"timestamp": "2025-01-24T11:09:00Z", "date_only": false, "value": "2025-01-24T11:09:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 \u00b7 CVE-2017-20196 / VulDB", "record": "CVE-2017-20196", "field": "containers.cna.timeline.4.time", "text": "VulDB entry last update", "linked_record": true}, {"timestamp": "2025-01-26T18:00:08.815Z", "date_only": false, "value": "2025-01-26T18:00:08.815Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2017-20196", "record": "CVE-2017-20196", "field": "cveMetadata.datePublished", "linked_record": true}, {"timestamp": "2025-01-26T18:00:08.815Z", "date_only": false, "value": "2025-01-26T18:00:08.815Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2017-20196 / VulDB", "record": "CVE-2017-20196", "field": "containers.cna.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-01-26T18:15:27Z", "date_only": false, "value": "2025-01-26T18:15:27Z", "kind": "other", "label": "Nvd published at", "source": "github", "record": "ghsa-r793-4q47-gmj4", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-01-26T18:30:32Z", "date_only": false, "value": "2025-01-26T18:30:32Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-r793-4q47-gmj4", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-01-26T18:30:32Z", "date_only": false, "value": "2025-01-26T18:30:32Z", "kind": "other", "label": "Updated", "source": "github", "record": "ghsa-r793-4q47-gmj4", "field": "modified"}, {"timestamp": "2025-01-26T19:07:25Z", "date_only": false, "value": "2025-01-26T19:07:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3144", "record": "GHSA-R793-4Q47-GMJ4", "field": "creation_timestamp", "uuid": "4e600f0f-a469-40eb-b4da-5937a1bb80d8", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-r793-4q47-gmj4\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability was found in Itechscripts School Management Software 2.75. It has been classified as critical. This affects an unknown part of the file /notice-edit.php. The manipulation of the argument aid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-26T18:30:32Z\n\ud83d\udccf Modified: 2025-01-26T18:30:32Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2017-20196\n2. https://vuldb.com/?ctiid.95307\n3. https://vuldb.com/?id.95307\n4. https://www.exploit-db.com/exploits/41034", "url": "https://t.me/DarkWebInformer_CVEAlerts/3144", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-01-28T14:38:59.901Z", "date_only": false, "value": "2025-01-28T14:38:59.901669Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2017-20196 / CISA-ADP", "record": "CVE-2017-20196", "field": "containers.adp.0.metrics.0.other.content.timestamp", "linked_record": true}, {"timestamp": "2025-01-28T14:41:05.670Z", "date_only": false, "value": "2025-01-28T14:41:05.670Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2017-20196", "record": "CVE-2017-20196", "field": "cveMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-01-28T14:41:05.670Z", "date_only": false, "value": "2025-01-28T14:41:05.670Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2017-20196 / CISA-ADP", "record": "CVE-2017-20196", "field": "containers.adp.0.providerMetadata.dateUpdated", "linked_record": true}], "metrics": {"as_of": "2026-11-14T04:27:05.844Z", "anchors": {"origin": {"timestamp": "2025-01-26T18:30:32Z", "date_only": false, "value": "2025-01-26T18:30:32Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-r793-4q47-gmj4", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-01-26T18:30:32Z", "date_only": false, "value": "2025-01-26T18:30:32Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-r793-4q47-gmj4", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-01-26T19:07:25Z", "date_only": false, "value": "2025-01-26T19:07:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3144", "record": "GHSA-R793-4Q47-GMJ4", "field": "creation_timestamp", "uuid": "4e600f0f-a469-40eb-b4da-5937a1bb80d8", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-r793-4q47-gmj4\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability was found in Itechscripts School Management Software 2.75. It has been classified as critical. This affects an unknown part of the file /notice-edit.php. The manipulation of the argument aid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-26T18:30:32Z\n\ud83d\udccf Modified: 2025-01-26T18:30:32Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2017-20196\n2. https://vuldb.com/?ctiid.95307\n3. https://vuldb.com/?id.95307\n4. https://www.exploit-db.com/exploits/41034", "url": "https://t.me/DarkWebInformer_CVEAlerts/3144", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 2213.0, "hours": 0.6147222222222222, "days": 0.025613425925925925, "min_seconds": 2213.0, "max_seconds": 2213.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-01-26T18:30:32Z", "date_only": false, "value": "2025-01-26T18:30:32Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-r793-4q47-gmj4", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-01-26T19:07:25Z", "date_only": false, "value": "2025-01-26T19:07:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3144", "record": "GHSA-R793-4Q47-GMJ4", "field": "creation_timestamp", "uuid": "4e600f0f-a469-40eb-b4da-5937a1bb80d8", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-r793-4q47-gmj4\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability was found in Itechscripts School Management Software 2.75. It has been classified as critical. This affects an unknown part of the file /notice-edit.php. The manipulation of the argument aid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-26T18:30:32Z\n\ud83d\udccf Modified: 2025-01-26T18:30:32Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2017-20196\n2. https://vuldb.com/?ctiid.95307\n3. https://vuldb.com/?id.95307\n4. https://www.exploit-db.com/exploits/41034", "url": "https://t.me/DarkWebInformer_CVEAlerts/3144", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 56714193.844898, "hours": 15753.942734693888, "days": 656.4142806122454, "min_seconds": 56714193.844898, "max_seconds": 56714193.844898, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-01-26T18:30:32Z", "date_only": false, "value": "2025-01-26T18:30:32Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-r793-4q47-gmj4", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-14T04:27:05.844Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 56711980.844898, "hours": 15753.328012471668, "days": 656.3886671863195, "min_seconds": 56711980.844898, "max_seconds": 56711980.844898, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-01-26T19:07:25Z", "date_only": false, "value": "2025-01-26T19:07:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3144", "record": "GHSA-R793-4Q47-GMJ4", "field": "creation_timestamp", "uuid": "4e600f0f-a469-40eb-b4da-5937a1bb80d8", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-r793-4q47-gmj4\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability was found in Itechscripts School Management Software 2.75. It has been classified as critical. This affects an unknown part of the file /notice-edit.php. The manipulation of the argument aid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-26T18:30:32Z\n\ud83d\udccf Modified: 2025-01-26T18:30:32Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2017-20196\n2. https://vuldb.com/?ctiid.95307\n3. https://vuldb.com/?id.95307\n4. https://www.exploit-db.com/exploits/41034", "url": "https://t.me/DarkWebInformer_CVEAlerts/3144", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-14T04:27:05.844Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}