Approved changes feed: RSS · Atom

cpe:2.3:a:schools_alert_management_script_project:schools_alert_management_script:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorSchools Alert Management Script Project (bb9a22eb-0b64-514e-84ea-706a4f5fef0b)
ProductSchools Alert Management Script (bcf5bf24-966f-5422-8e1d-33b57618d987)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-12055 vulnerable 2026-06-08 05:10:39.775576 Details available
Multiple SQL Injections exist in PHP Scripts Mall Schools Alert Management Script via crafted POST data in contact_us.php, faq.php, about.php, photo_gallery.php, privacy.php, and so on.
Published: 2018-06-08T11:00:00.000Z
Updated: 2024-08-05T08:24:03.753Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-12054 vulnerable 2026-06-08 05:10:39.775176 Details available
Arbitrary File Read exists in PHP Scripts Mall Schools Alert Management Script via the f parameter in img.php, aka absolute path traversal.
Published: 2018-06-08T11:00:00.000Z
Updated: 2024-08-05T08:24:03.714Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-12053 vulnerable 2026-06-08 05:10:39.774719 Details available
Arbitrary File Deletion exists in PHP Scripts Mall Schools Alert Management Script via the img parameter in delete_img.php by using directory traversal.
Published: 2018-06-08T11:00:00.000Z
Updated: 2024-08-05T08:24:03.730Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-12052 vulnerable 2026-06-08 05:10:39.774297 Details available
SQL Injection exists in PHP Scripts Mall Schools Alert Management Script via the q Parameter in get_sec.php.
Published: 2018-06-08T11:00:00.000Z
Updated: 2024-08-05T08:24:03.624Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-12051 vulnerable 2026-06-08 05:10:39.773901 Details available
Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script via $_FILE in /webmasterst/general.php, as demonstrated by a .php file with the image/jpeg content type.
Published: 2018-06-08T11:00:00.000Z
Updated: 2024-09-17T03:14:38.687Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.