github.com
https://github.com/unh3x/just4cve/issues/2 CVE-2018-12055
CRITICAL
Schools Alert Management Script - SQL Injection
Record summary
CVE-2018-12055 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit.
Description
Multiple SQL Injections exist in PHP Scripts Mall Schools Alert Management Script via crafted POST data in contact_us.php, faq.php, about.php, photo_gallery.php, privacy.php, and so on.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBSchools Alert Management Script - SQL InjectionExploitDB exploitby M3@PandasNot analyzed1 file
References
3nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2018-12055 44866exploit
https://www.exploit-db.com/exploits/44866