CVE-2018-6859

CRITICAL

Schools Alert Management Script 2.0.2 - SQL Injection via Login Parameter

Title source: llm

SQL Injection exists in PHP Scripts Mall Schools Alert Management Script 2.0.2 via the Login Parameter.

Core 2

Core References

Exploit, Third Party Advisory, VDB Entry exploit x_refsource_exploit-db

Exploit, Third Party Advisory x_refsource_misc

CVSS v3 9.8

EPSS 0.0174

EPSS Percentile 75.3%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-89

Status published

Products (1)

schools_alert_management_script_project/schools_alert_management_script 2.0.2

Published Feb 23, 2018

Tracked Since Feb 18, 2026