Loading product vulnerabilities…
Total
3
Critical
0
High
0
Medium
0
CISA KEV
0
School Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php id parameter.
School Event Management System 1.0 allows CSRF via user/controller.php?action=edit.
School Event Management System 1.0 allows Arbitrary File Upload via event/controller.php?action=photos.