← Back

School Event Management System

school_event_management_system

Vendor: School Event Management System Project • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-18795
1School Event Management System Project
1School Event Management System
Nov 21, 2024
Nov 16, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
School Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php id parameter.
CVE-2018-18794
1School Event Management System Project
1School Event Management System
Nov 21, 2024
Nov 16, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
School Event Management System 1.0 allows CSRF via user/controller.php?action=edit.
CVE-2018-18793
1School Event Management System Project
1School Event Management System
Nov 21, 2024
Nov 16, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
School Event Management System 1.0 allows Arbitrary File Upload via event/controller.php?action=photos.