CVE-2018-12053

high · 7.5

Arbitrary File Deletion exists in PHP Scripts Mall Schools Alert Management Script via the img parameter in delete_img.php by using directory traversal.

7.5

CVSS

10.9%

EPSS (exploit prob.)

96th

EPSS percentile

2018-06-08

Published

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weaknesses

CWE-22

Affected products

Vendor	Product	Affected versions
schools_alert_management_script_project	schools_alert_management_script	all versions

Check a specific version with /api/v1/cve/match.

References

https://github.com/unh3x/just4cve/issues/6
https://www.exploit-db.com/exploits/44870/
https://github.com/unh3x/just4cve/issues/6
https://www.exploit-db.com/exploits/44870/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2018-12053