CVE-2020-27956

2020-10-2802:18:22

mitre

www.cve.org

9.8 High

AI Score

Confidence

High

0.054 Low

EPSS

Percentile

93.2%

JSON

An Arbitrary File Upload in the Upload Image component in SourceCodester Car Rental Management System 1.0 allows the user to conduct remote code execution via admin/index.php?page=manage_car because .php files can be uploaded to admin/assets/uploads/ (under the web root).