cve/2018/CVE-2018-12051.md

CVE-2018-12051

Description

Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script via $_FILE in /webmasterst/general.php, as demonstrated by a .php file with the image/jpeg content type.

POC

Reference

• https://github.com/unh3x/just4cve/issues/5
• https://github.com/unh3x/just4cve/issues/5

Github

No PoCs found on GitHub currently.