CVE-2018-18793
School Event Management System 1.0 allows Arbitrary File Upload via event/controller.php?action=photos.
- Affected products
- School Management System
- School Event Management System Project School Event Management System
- = 1.0
- Fix
- Available
- CVSS 3.0
- 9.8 CRITICAL
- EPSS
- 9.5% (95th percentile)
- Weakness
- CWE-434
- NVD status
- Modified
- Published
- 2018-11-16
CVE-2018-18793 at NVD
4 known exploits for CVE-2018-18793
Proof-of-concept code and exploit modules indexed by Sploitus