CVE-2018-18797

概要

参考情報

• packetstormsecurity.com/files/150008/School-Attendance-Monitoring-System-1.0-Cross-Site-Request-Forgery.html · Exploit
• exploit-db.com/exploits/45725 · Exploit

school attendance monitoring system のその他の脆弱性

• CVE-2018-18798緊急 9.8Attendance Monitoring System 1.0 has SQL Injection via the 'id' parameter to student/index.php?view=view, event/index.php?view=view, and use…
• CVE-2018-18799高 8.8School Attendance Monitoring System 1.0 has CSRF via event/controller.php?action=photos.