High severity8.8NVD Advisory· Published Feb 12, 2018· Updated Jun 17, 2026
CVE-2018-6860
CVE-2018-6860
Description
Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script 2.0.2 via a profile picture.
Affected products
2- Range: =2.0.2
- cpe:2.3:a:schools_alert_management_script_project:schools_alert_management_script:2.0.2:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- www.exploit-db.com/exploits/44011nvdExploitThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.