Design/Logic Flaw

2022-04-0414:15:00

PRIOn knowledge base

www.prio-n.com

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.6%

JSON

Car Rental System v1.0 contains an arbitrary file upload vulnerability via the Add Car component which allows attackers to upload a webshell and execute arbitrary code.

CPENameOperatorVersion
online_car_rental_systemeq1.0

CPE	Name	Operator	Version
	online_car_rental_system	eq	1.0

References

github.com/D4rkP0w4r/CVEs/blob/main/Car%20Rental%20System%20Upload%20%2B%20RCE/POC.md

hackmd.io/DUiTnVpLSVKihcyPloLdPg