CVE:CVE-2018-18797
CNNVD:CNNVD-201811-542
School Attendance Monitoring System是一套学校考勤监控系统。
School Attendance Monitoring System 1.0版本中存在跨站请求伪造漏洞。远程攻击者可借助/user/user/edit.php文件利用该漏洞更新管理员信息。
solution:Upgrade school_attendance_monitoring_system_project school_attendance_monitoring_system to a higher version than 1.0,and avoid the version 1.0