Skip to content

CVE-2018-6860 Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script 2.0.2 via a profile picture.

HighCVSS 8.8 EPSS 2.5%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script 2.0.2 via a profile picture.

Affected products

ProductAffected versionsFixed in
schools alert management script project schools alert management script = 2.0.2 No fix listed

References

  • 44011 exploit third-party-advisory vdb-entry