School Event Management System Project School Event Management System
3 CVEs affecting School Event Management System Project School Event Management System. Latest disclosed: 2018-11-16. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-18795 | Critical | 9.8 | 2018-11-16 | School Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php id parameter. |
CVE-2018-18793 | Critical | 9.8 | 2018-11-16 | School Event Management System 1.0 allows Arbitrary File Upload via event/controller.php?action=photos. |
CVE-2018-18794 | High | 8.8 | 2018-11-16 | School Event Management System 1.0 allows CSRF via user/controller.php?action=edit. |