critical9.8
CVE-2018-12051
Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script via $_FILE in /webmasterst/general.php, as demonstrat…
Impact
Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script via $_FILE in /webmasterst/general.php, as demonstrated by a .php file with the image/jpeg content type.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schools Alert Management Script Project | Schools Alert Management Script | All versions |