CVE-2018-12055

Multiple SQL Injections exist in PHP Scripts Mall Schools Alert Management Script via crafted POST data in contact_us.php, faq.php, about.php, photo_gallery.php, privacy.php, and so on.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-06-08

Last modified

2024-08-05

Weaknesses

CWE-89

Affected products

• Schools Alert Management Script (Schools Alert Management Script Project)

References

• https://github.com/unh3x/just4cve/issues/2
• https://www.exploit-db.com/exploits/44866/