CVE-2020-24203

Published August 27th, 2020

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

7.5

HIGH

Affected

PROJECT

Description

Insecure File Permissions and Arbitrary File Upload in the upload pic function in updatesubcategory.php in Projects World Travel Management System v1.0 allows remote unauthenticated attackers to gain remote code execution.

hyd3sec/TravelManagementSystem_Unauth_RCE

Travel Management System v1.0 Unauthenticated RCE Exploit

GitHub