CVE-2018-18799

School Attendance Monitoring System 1.0 has CSRF via event/controller.php?action=photos...

CVE-2018-18799: Cross-Site Request Forgery (CSRF)

School Attendance Monitoring System 1.0 has CSRF via event/controller.php?action=photos...

CVE-2018-18793: Unrestricted Upload of File with Dangerous Type

School Event Management System 1.0 allows Arbitrary File Upload via event/controller.php?action=photos...

PT-2018-14662

Name of the Vulnerable Software and Affected Versions School Attendance Monitoring System version 1.0 Description The issue concerns a CSRF vulnerability. It affects the "event/controller.php" endpoint, specifically when the "action" parameter is set to "photos". Recommendations For School...

PT-2018-14657

Name of the Vulnerable Software and Affected Versions School Event Management System version 1.0 Description The issue allows for Arbitrary File Upload. This can be achieved via the "event/controller.php?action=photos" endpoint, specifically by exploiting the action parameter set to photos...