high7.2Public exploit code
CVE-2020-5509
PHPGurukul Car Rental Project v1.0 allows Remote Code Execution via an executable file in an upload of a new profile image.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Car Rental Project 1.0 - Remote Code Execution2025-04-16 · webapps · php
Impact
PHPGurukul Car Rental Project v1.0 allows Remote Code Execution via an executable file in an upload of a new profile image.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpgurukul | Car Rental Portal | Version 1.0 |