critical9.8
CVE-2020-25763
Seat Reservation System version 1.0 suffers from an Unauthenticated File Upload Vulnerability allowing Remote Attackers to gain Remote Code Execution (RCE) on …
Impact
Seat Reservation System version 1.0 suffers from an Unauthenticated File Upload Vulnerability allowing Remote Attackers to gain Remote Code Execution (RCE) on the Hosting Webserver via uploading PHP files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Seat Reservation System Project | Seat Reservation System | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/159260/Seat-Reservation-System-1.0-Shell-Upload.html
- http://seclists.org/fulldisclosure/2020/Sep/41
- https://packetstormsecurity.com/files/author/15149
- http://packetstormsecurity.com/files/159260/Seat-Reservation-System-1.0-Shell-Upload.html
- http://seclists.org/fulldisclosure/2020/Sep/41
- https://packetstormsecurity.com/files/author/15149