The Schools Alert Management Script Project maintains a focused educational alert-notification application that has attracted vulnerabilities skewing strongly toward critical severity. Its disclosures recur around input-handling and file-management weaknesses—SQL injection, path traversal, and unrestricted file uploads—that are endemic to web-facing administrative scripts handling sensitive school communications. Current exploitation activity and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Schools Alert Management Script Project over time
Signals from CVEs in this vendor scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-12054HIGH Arbitrary File Read exists in PHP Scripts Mall Schools Alert Management Script via the f parameter in img.php, aka absolute path traversal. | Jun 8, 2018 | 7.5 | 62 | NO | YES |
CVE-2018-12052CRITICAL SQL Injection exists in PHP Scripts Mall Schools Alert Management Script via the q Parameter in get_sec.php. | Jun 8, 2018 | 9.8 | 39 | NO | YES |
CVE-2018-12055CRITICAL Multiple SQL Injections exist in PHP Scripts Mall Schools Alert Management Script via crafted POST data in contact_us.php, faq.php, about.php, photo_gallery.php, privacy.php, and s | Jun 8, 2018 | 9.8 | 38 | NO | YES |
CVE-2018-12053HIGH Arbitrary File Deletion exists in PHP Scripts Mall Schools Alert Management Script via the img parameter in delete_img.php by using directory traversal. | Jun 8, 2018 | 7.5 | 37 | NO | YES |
CVE-2018-6859CRITICAL SQL Injection exists in PHP Scripts Mall Schools Alert Management Script 2.0.2 via the Login Parameter. | Feb 23, 2018 | 9.8 | 28 | NO | NO |
CVE-2018-12051CRITICAL Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script via $_FILE in /webmasterst/general.php, as demonstrated by a .php file wit | Jun 8, 2018 | 9.8 | 27 | NO | NO |
CVE-2018-6860HIGH Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script 2.0.2 via a profile picture. | Feb 12, 2018 | 8.8 | 25 | NO | NO |
Signals from CVEs in this vendor scope (7 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Schools Alert Management Script Project.
Media articles that mention a CVE ID that affects a product developed by Schools Alert Management Script Project — matched by CVE ID, not by vendor name.