SourceCodester Tourism Management System Arbitrary File Upload Vulnerability

SourceCodester Tourism Management System is a website builder for tourism management from SourceCodester. SourceCodester Tourism Management System has an arbitrary file upload vulnerability that can be exploited for remote code execution via the admin create-package.php vulnerability page...

CVE-2020-28136

An Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote code execution via admin/create-package.php vulnerable page...

PT-2020-16932 · Sourcecodester · Sourcecodester Tourism Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Tourism Management System version 1.0 Description: An Arbitrary File Upload issue allows users to conduct remote code execution via the "admin/create-package.php" page. This enables attackers to upload malicious files,...