Vendors / Schools Alert Management Script Project Schools Alert Management Script Project Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 3
Exploited now Schools Alert Management Script Project records in CISA KEV No Schools Alert Management Script Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 60
Arbitrary File Read exists in PHP Scripts Mall Schools Alert Management Script via the f parameter in img.php, aka absolute path traversal.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.37861 · Published 2018-06-08 · No fix listed CWE-22
Priority MEDIUM 49
SQL Injection exists in PHP Scripts Mall Schools Alert Management Script via the q Parameter in get_sec.php.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04471 · Published 2018-06-08 · No fix listed CWE-89
Priority MEDIUM 48
Multiple SQL Injections exist in PHP Scripts Mall Schools Alert Management Script via crafted POST data in contact_us.php, faq.php, about.php, photo_gallery.php, privacy.php, and so on.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03123 · Published 2018-06-08 · No fix listed CWE-89
Priority MEDIUM 47
Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script via $_FILE in /webmasterst/general.php, as demonstrated by a .php file with the image/jpeg content type.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02813 · Published 2018-06-08 · No fix listed CWE-434
Priority MEDIUM 46
Arbitrary File Deletion exists in PHP Scripts Mall Schools Alert Management Script via the img parameter in delete_img.php by using directory traversal.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.10522 · Published 2018-06-08 · No fix listed CWE-22
Priority MEDIUM 45
SQL Injection exists in PHP Scripts Mall Schools Alert Management Script 2.0.2 via the Login Parameter.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01706 · Published 2018-02-23 · No fix listed CWE-89
Priority MEDIUM 43
Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script 2.0.2 via a profile picture.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02504 · Published 2018-02-12 · No fix listed CWE-434
Open these records in search → All records by CVSS severity
4 3 0 0 0
THREATIST.IORead the docs