CVE-2020-10224

An unauthenticated file upload vulnerability has been identified in admin_add.php in PHPGurukul Online Book Store 1.0. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to the server, including PHP files, which could result in command execution.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2020-03-08

Last modified

2024-08-04

Weaknesses

CWE-434

Affected products

• Online Book Store (Phpgurukul)

References

• https://tib3rius.com/cves.html
• https://www.exploit-db.com/exploits/47887