CVE:CVE-2018-18793
CNNVD:CNNVD-201811-538
School Event Management System是一套学校事件管理系统。
School Event Management System 1.0版本中存在安全漏洞。攻击者可借助event/controller.php?action=photos URL利用该漏洞上传任意文件。
solution:Upgrade school_event_management_system_project school_event_management_system to a higher version than 1.0,and avoid the version 1.0