PatchTheCVE: school event management system project

PatchTheCVE: school event management system projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2018-18795: School Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php id parameterhttps://patchthecve.com/cve/CVE-2018-18795.htmlhttps://patchthecve.com/cve/CVE-2018-18795.htmlWed, 17 Jun 2026 01:47:54 +0000CRITICAL 9.8: School Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php id parameter.CVE-2018-18794: School Event Management System 1.0 allows CSRF via user/controller.php?action=edit.https://patchthecve.com/cve/CVE-2018-18794.htmlhttps://patchthecve.com/cve/CVE-2018-18794.htmlWed, 17 Jun 2026 01:47:54 +0000HIGH 8.8: School Event Management System 1.0 allows CSRF via user/controller.php?action=edit.CVE-2018-18793: School Event Management System 1.0 allows Arbitrary File Upload via event/controller.php?action=photos.https://patchthecve.com/cve/CVE-2018-18793.htmlhttps://patchthecve.com/cve/CVE-2018-18793.htmlWed, 17 Jun 2026 01:47:54 +0000CRITICAL 9.8: School Event Management System 1.0 allows Arbitrary File Upload via event/controller.php?action=photos.