critical9.8
CVE-2018-6859
SQL Injection exists in PHP Scripts Mall Schools Alert Management Script 2.0.2 via the Login Parameter.
Impact
SQL Injection exists in PHP Scripts Mall Schools Alert Management Script 2.0.2 via the Login Parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schools Alert Management Script Project | Schools Alert Management Script | Version 2.0.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://0day4u.wordpress.com/2018/02/22/schools-alert-management-script-2-0-2-authentication-bypass/
- https://www.exploit-db.com/exploits/44185/
- https://0day4u.wordpress.com/2018/02/22/schools-alert-management-script-2-0-2-authentication-bypass/
- https://www.exploit-db.com/exploits/44185/