CVE-2020-27956

Published: 2020-10-28T03:15Z

Last Modified: 2024-11-21T05:22Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

An Arbitrary File Upload in the Upload Image component in SourceCodester Car Rental Management System 1.0 allows the user to conduct remote code execution via admin/index.php?page=manage_car because .php files can be uploaded to admin/assets/uploads/ (under the web root). > MITRE Terms of Use apply – see LICENSE‑MITRE.txt