School Event Management System CVEs and Security Vulnerabilities - OpenCVE

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2018-18795

School Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php id parameter.

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed

Vendors

School Event Management System Project

Products

School Event Management System

CVE-2018-18794

School Event Management System 1.0 allows CSRF via user/controller.php?action=edit.

CVSS 3.0 · 8.8 High EPSS 2.4% KEV · Not listed

Vendors

School Event Management System Project

Products

School Event Management System

CVE-2018-18793

School Event Management System 1.0 allows Arbitrary File Upload via event/controller.php?action=photos.

CVSS 3.0 · 9.8 Critical EPSS 9.5% KEV · Not listed

Vendors

School Event Management System Project

Products

School Event Management System

Page 1 of 1.