CVE-2018-12054 - Arbitrary File Read exists in PHP Scripts Mall Schools Alert Management Script via the f parameter in img.php, aka absolute path traversal

HIGH

Arbitrary File Read exists in PHP Scripts Mall Schools Alert Management Script via the f parameter in img.php, aka absolute path traversal

Published Jun 8, 2018

7.5

HIGH

CVSS 3.0

EPSS 38.99%

Arbitrary File Read exists in PHP Scripts Mall Schools Alert Management Script via the f parameter in img.php, aka absolute path traversal.

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

https://github.com/unh3x/just4cve/issues/4
x_refsource_MISCExploitThird Party Advisory
https://www.exploit-db.com/exploits/44874/
exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://github.com/unh3x/just4cve/issues/4		x_refsource_MISCExploitThird Party Advisory
https://www.exploit-db.com/exploits/44874/		exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jun 8, 2018

Updated Aug 5, 2024

Reserved Jun 8, 2018

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner n/a

Published n/a

Updated n/a

Exploited since n/a

Link n/a