PatchTheCVE: schools alert management scripthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2018-12055: Multiple SQL Injections exist in PHP Scripts Mall Schools Alert Management Script via crafted POST data in conhttps://patchthecve.com/cve/CVE-2018-12055.htmlhttps://patchthecve.com/cve/CVE-2018-12055.htmlWed, 17 Jun 2026 01:37:04 +0000CRITICAL 9.8: Multiple SQL Injections exist in PHP Scripts Mall Schools Alert Management Script via crafted POST data in contact_us.php, faq.php, about.php, photo_gallery.php, privacy.php, and so on.CVE-2018-12054: Arbitrary File Read exists in PHP Scripts Mall Schools Alert Management Script via the f parameter in img.php,https://patchthecve.com/cve/CVE-2018-12054.htmlhttps://patchthecve.com/cve/CVE-2018-12054.htmlWed, 17 Jun 2026 01:37:04 +0000HIGH 7.5: Arbitrary File Read exists in PHP Scripts Mall Schools Alert Management Script via the f parameter in img.php, aka absolute path traversal.CVE-2018-12053: Arbitrary File Deletion exists in PHP Scripts Mall Schools Alert Management Script via the img parameter in dehttps://patchthecve.com/cve/CVE-2018-12053.htmlhttps://patchthecve.com/cve/CVE-2018-12053.htmlWed, 17 Jun 2026 01:37:04 +0000HIGH 7.5: Arbitrary File Deletion exists in PHP Scripts Mall Schools Alert Management Script via the img parameter in delete_img.php by using directory traversal.CVE-2018-12052: SQL Injection exists in PHP Scripts Mall Schools Alert Management Script via the q Parameter in get_sec.php.https://patchthecve.com/cve/CVE-2018-12052.htmlhttps://patchthecve.com/cve/CVE-2018-12052.htmlWed, 17 Jun 2026 01:37:04 +0000CRITICAL 9.8: SQL Injection exists in PHP Scripts Mall Schools Alert Management Script via the q Parameter in get_sec.php.CVE-2018-12051: Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script via https://patchthecve.com/cve/CVE-2018-12051.htmlhttps://patchthecve.com/cve/CVE-2018-12051.htmlWed, 17 Jun 2026 01:37:04 +0000CRITICAL 9.8: Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script via $_FILE in /webmasterst/general.php, as demonstrated by a .php file with the image/jpeg content type.CVE-2018-6859: SQL Injection exists in PHP Scripts Mall Schools Alert Management Script 2.0.2 via the Login Parameter.https://patchthecve.com/cve/CVE-2018-6859.htmlhttps://patchthecve.com/cve/CVE-2018-6859.htmlWed, 17 Jun 2026 02:02:22 +0000CRITICAL 9.8: SQL Injection exists in PHP Scripts Mall Schools Alert Management Script 2.0.2 via the Login Parameter.CVE-2018-6860: Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script 2.0.https://patchthecve.com/cve/CVE-2018-6860.htmlhttps://patchthecve.com/cve/CVE-2018-6860.htmlWed, 17 Jun 2026 02:02:22 +0000HIGH 8.8: Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script 2.0.2 via a profile picture.