School Attendance Monitoring System
by School Attendance Monitoring System Project
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2018-18798 | Cri | 0.67 | 9.8 | 0.03 | Mar 21, 2019 | Attendance Monitoring System 1.0 has SQL Injection via the 'id' parameter to student/index.php?view=view, event/index.php?view=view, and user/index.php?view=view. | ||
| CVE-2018-18799 | Hig | 0.60 | 8.8 | 0.02 | Nov 16, 2018 | School Attendance Monitoring System 1.0 has CSRF via event/controller.php?action=photos. | ||
| CVE-2018-18797 | Hig | 0.60 | 8.8 | 0.02 | Nov 16, 2018 | School Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php. |
- risk 0.67cvss 9.8epss 0.03
Attendance Monitoring System 1.0 has SQL Injection via the 'id' parameter to student/index.php?view=view, event/index.php?view=view, and user/index.php?view=view.
- risk 0.60cvss 8.8epss 0.02
School Attendance Monitoring System 1.0 has CSRF via event/controller.php?action=photos.
- risk 0.60cvss 8.8epss 0.02
School Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php.