PatchTheCVE: school attendance monitoring systemhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2018-18798: Attendance Monitoring System 1.0 has SQL Injection via the 'id' parameter to student/index.php?view=view, evenhttps://patchthecve.com/cve/CVE-2018-18798.htmlhttps://patchthecve.com/cve/CVE-2018-18798.htmlWed, 17 Jun 2026 01:47:55 +0000CRITICAL 9.8: Attendance Monitoring System 1.0 has SQL Injection via the 'id' parameter to student/index.php?view=view, event/index.php?view=view, and user/index.php?view=view.CVE-2018-18799: School Attendance Monitoring System 1.0 has CSRF via event/controller.php?action=photos.https://patchthecve.com/cve/CVE-2018-18799.htmlhttps://patchthecve.com/cve/CVE-2018-18799.htmlWed, 17 Jun 2026 01:47:55 +0000HIGH 8.8: School Attendance Monitoring System 1.0 has CSRF via event/controller.php?action=photos.CVE-2018-18797: School Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php.https://patchthecve.com/cve/CVE-2018-18797.htmlhttps://patchthecve.com/cve/CVE-2018-18797.htmlWed, 17 Jun 2026 01:47:54 +0000HIGH 8.8: School Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php.