Skip to content
OpenAdvisories
Unscored CVE-2018-12051 EUVD-2018-4034GHSA-h2vm-5rf8-rrrr

Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script via $_FILE in /webmasterst/genera…

Published Jun 8, 2018 · Updated Sep 17, 2024 · Assigned by mitre

Description

Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script via $_FILE in /webmasterst/general.php, as demonstrated by a .php file with the image/jpeg content type.

References