github.com
https://github.com/unh3x/just4cve/issues/3 CVE-2018-12052
CRITICAL
Schools Alert Management Script - 'get_sec.php' SQL Injection
Record summary
CVE-2018-12052 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit.
Description
SQL Injection exists in PHP Scripts Mall Schools Alert Management Script via the q Parameter in get_sec.php.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBSchools Alert Management Script - 'get_sec.php' SQL InjectionExploitDB exploitby M3@PandasNot analyzed1 file
References
3nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2018-12052 44873exploit
https://www.exploit-db.com/exploits/44873