2 matches found
CVE-2020-27956
An Arbitrary File Upload in the Upload Image component in SourceCodester Car Rental Management System 1.0 allows the user to conduct remote code execution via admin/index.php?page=managecar because .php files can be uploaded to admin/assets/uploads/ under the web root...
9.8CVSS7.8AI score0.05374EPSS
SaveExploits1References2
CVE-2020-27956: Unrestricted Upload of File with Dangerous Type
An Arbitrary File Upload in the Upload Image component in SourceCodester Car Rental Management System 1.0 allows the user to conduct remote code execution via admin/index.php?page=managecar because .php files can be uploaded to admin/assets/uploads/ under the web root...
9.8CVSS6.2AI score0.05374EPSS
SaveExploits1References2
20