CVE-2020-28136

SourceCodester Tourism Management System 1.0 is affected by an Arbitrary File Upload vulnerability that enables remote code execution through the admin/create-package.php page. The root cause is the ability to upload executable files, allowing an attacker to gain control of the system. Public ref...

Tourism Management System 1.0 - Arbitrary File Upload

Exploit Title: Tourism Management System 1.0 - Arbitrary File Upload Date: 2020-10-19 Exploit Author: Ankita Pal & Saurav Shukla Vendor Homepage: https://phpgurukul.com/tourism-management-system-free-download/ Software Link: https://phpgurukul.com/?smdprocessdownload=1&downloadid=7204 Version: V1...