Vulnerability Details CVE-2020-24199
Arbitrary File Upload in the Vehicle Image Upload component in Project Worlds Car Rental Management System v1.0 allows attackers to conduct remote code execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.034
EPSS Ranking 86.8%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- https://github.com/hyd3sec/CarRentalManagement-Unauth-RCE-WebApp
- https://github.com/hyd3sec/CarRentalManagement-Unauth-RCE-WebApp/blob/master/CarRental-Unauth-RCE.py
- https://projectworlds.in/free-projects/php-projects/car-rental-project-in-php-and-mysql/
- https://github.com/hyd3sec/CarRentalManagement-Unauth-RCE-WebApp
- https://github.com/hyd3sec/CarRentalManagement-Unauth-RCE-WebApp/blob/master/CarRental-Unauth-RCE.py
- https://projectworlds.in/free-projects/php-projects/car-rental-project-in-php-and-mysql/
Products affected by CVE-2020-24199
-
cpe:2.3:a:projectworlds:car_rental_project:1.0