CVE-2020-28072

CVE-2020-28072 affects DourceCodester Alumni Management System 1.0. An authenticated attacker can upload arbitrary PHP files via gallery.php and execute them on the server, achieving Remote Code Execution. Root cause is improper file upload handling enabling arbitrary file upload and execution. E...

CVE-2020-28072

A Remote Code Execution vulnerability exists in DourceCodester Alumni Management System 1.0. An authenticated attacker can upload arbitrary file in the gallery.php page and executing it on the server reaching the RCE...

CVE-2020-28072: Unrestricted Upload of File with Dangerous Type

A Remote Code Execution vulnerability exists in DourceCodester Alumni Management System 1.0. An authenticated attacker can upload arbitrary file in the gallery.php page and executing it on the server reaching the RCE...

PT-2020-16918

Name of the Vulnerable Software and Affected Versions DourceCodester Alumni Management System version 1.0 Description A Remote Code Execution issue exists, allowing an authenticated attacker to upload arbitrary files in the "gallery.php" page and execute them on the server. This enables the...