CVE-2020-24202

File Upload component in Projects World House Rental v1.0 suffers from an arbitrary file upload vulnerability with regular users, which allows remote attackers to conduct code execution.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 86%
VendorProductVersion
projectworldshouse_rental_and_property_listing_project
1.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/hyd3sec/HouseRental_Unauth_RCE/blob/master/HouseRentalRCE.py
https://projectworlds.in/free-projects/php-projects/house-rental-and-property-listing-project-php-mysql/
https://github.com/hyd3sec/HouseRental_Unauth_RCE/blob/master/HouseRentalRCE.py
https://projectworlds.in/free-projects/php-projects/house-rental-and-property-listing-project-php-mysql/