dbcve.org
Vulnerability index

Browse CVEs

7 matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12536 Microsoft 12379 Oracle 6843 Apple 6692 Adobe 6387 Ibm 6336 Cisco 5759 Debian 3919 Mozilla 2895 Apache 2864 Redhat 2592
Schools Alert Management Script CRITICAL 9.8
CVE-2018-12055

Multiple SQL Injections exist in PHP Scripts Mall Schools Alert Management Script via crafted POST data in contact_us.php, faq.php, about.php, photo_…

No fix yet
Fix from $2,300 2018-06-08
Schools Alert Management Script CRITICAL 9.8
CVE-2018-12051

Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script via $_FILE in /webmasterst/general.php, as …

No fix yet
Fix from $2,300 2018-06-08
Schools Alert Management Script CRITICAL 9.8
CVE-2018-12052

SQL Injection exists in PHP Scripts Mall Schools Alert Management Script via the q Parameter in get_sec.php.

No fix yet
Fix from $2,300 2018-06-08
Schools Alert Management Script HIGH 7.5
CVE-2018-12053EPSS 11%

Arbitrary File Deletion exists in PHP Scripts Mall Schools Alert Management Script via the img parameter in delete_img.php by using directory travers…

No fix yet
Fix from $1,950 2018-06-08
Schools Alert Management Script HIGH 7.5
CVE-2018-12054EPSS 39%

Arbitrary File Read exists in PHP Scripts Mall Schools Alert Management Script via the f parameter in img.php, aka absolute path traversal.

No fix yet
Fix from $1,950 2018-06-08
Schools Alert Management Script CRITICAL 9.8
CVE-2018-6859

SQL Injection exists in PHP Scripts Mall Schools Alert Management Script 2.0.2 via the Login Parameter.

No fix yet
Fix from $2,300 2018-02-23
Schools Alert Management Script HIGH 8.8
CVE-2018-6860

Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script 2.0.2 via a profile picture.

No fix yet
Fix from $1,950 2018-02-12