hyd3sec/TravelManagementSystem_Unauth_RCE

hyd3sec/TravelManagementSystem_Unauth_RCE

Releases0
Stars3
Travel Management System v1.0 Unauthenticated RCE Exploit

CVE History

CVEPublishedCVSS v3CVSS v2
9.8 CRITICAL7.5 HIGH

Insecure File Permissions and Arbitrary File Upload in the upload pic function in updatesubcategory.php in Projects World Travel Management System v1.0 allows remote unauthenticated attackers to gain remote code execution.