An Arbitrary File Upload in the Upload Image component in SourceCodester Car Rental Management System 1.0 allows the user to conduct remote code execution via admin/index.php?page=manage_car because .php files can be uploaded to admin/assets/uploads/ (under the web root).
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2020-10-28T02:18:22

Updated: 2024-08-04T16:25:44.108Z

Reserved: 2020-10-28T00:00:00

Link: CVE-2020-27956

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-10-28T03:15:12.583

Modified: 2024-11-21T05:22:07.187

Link: CVE-2020-27956

cve-icon Redhat

No data.