Schools Alert Management Script is susceptible to an arbitrary file read vulnerability via the f parameter in img.php, aka absolute path traversal.
Log in to view the POC file snapshot cached by Shenlong Bot
Log in to view