critical9.8
CVE-2020-24199
Arbitrary File Upload in the Vehicle Image Upload component in Project Worlds Car Rental Management System v1.0 allows attackers to conduct remote code executi…
Impact
Arbitrary File Upload in the Vehicle Image Upload component in Project Worlds Car Rental Management System v1.0 allows attackers to conduct remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Projectworlds | Car Rental Project | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/hyd3sec/CarRentalManagement-Unauth-RCE-WebApp
- https://github.com/hyd3sec/CarRentalManagement-Unauth-RCE-WebApp/blob/master/CarRental-Unauth-RCE.py
- https://projectworlds.in/free-projects/php-projects/car-rental-project-in-php-and-mysql/
- https://github.com/hyd3sec/CarRentalManagement-Unauth-RCE-WebApp
- https://github.com/hyd3sec/CarRentalManagement-Unauth-RCE-WebApp/blob/master/CarRental-Unauth-RCE.py
- https://projectworlds.in/free-projects/php-projects/car-rental-project-in-php-and-mysql/