CVE-2020-24202

EUVD-2020-16937
File Upload component in Projects World House Rental v1.0 suffers from an arbitrary file upload vulnerability with regular users, which allows remote attackers to conduct code execution.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 86%
Affected Products (NVD)
VendorProductVersion
projectworldshouse_rental_and_property_listing_project
1.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/hyd3sec/HouseRental_Unauth_RCE/blob/master/HouseRentalRCE.py
https://projectworlds.in/free-projects/php-projects/house-rental-and-property-listing-project-php-mysql/
https://github.com/hyd3sec/HouseRental_Unauth_RCE/blob/master/HouseRentalRCE.py
https://projectworlds.in/free-projects/php-projects/house-rental-and-property-listing-project-php-mysql/