cvedb.io
CVE-2018-7477
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2018-02-28T07:29:00.293 · Last modified 2026-06-17T02:03:11.260

Summary

SQL Injection exists in PHP Scripts Mall School Management Script 3.0.4 via the Username and Password fields to parents/Parent_module/parent_login.php.

Affected products

school_management_script_project — school_management_script

Does this affect you?

Add your gear to cvedb and we'll alert you only when school_management_script_project ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.