Vulnerabilities

TI-2018-13309 CVE-2018-18798 · GHSA-p92h-wp9r-m4c3

Attendance Monitoring System 1.0 has SQL Injection via the 'id' parameter to…

MEDIUM 48

Attendance Monitoring System 1.0 has SQL Injection via the 'id' parameter to student/index.php?view=view, event/index.php?view=view, and user/index.php?view=view.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03213 Published 2019-03-17 No fix listed CWE-89

TI-2018-13310 CVE-2018-18799 · GHSA-rgfv-crgq-7cpc

School Attendance Monitoring System 1.0 has CSRF via event/controller.php?action=photos.

MEDIUM 43

School Attendance Monitoring System 1.0 has CSRF via event/controller.php?action=photos.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02385 Published 2018-11-16 No fix listed CWE-352

TI-2018-13308 CVE-2018-18797 · GHSA-5j45-77jg-m9w3

School Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php.

MEDIUM 43

School Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02385 Published 2018-11-16 No fix listed CWE-352

Vulnerabilities

Filters

Attendance Monitoring System 1.0 has SQL Injection via the 'id' parameter to…

School Attendance Monitoring System 1.0 has CSRF via event/controller.php?action=photos.

School Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php.