CVE-2020-28072

A Remote Code Execution vulnerability exists in DourceCodester Alumni Management System 1.0. An authenticated attacker can upload arbitrary file in the gallery.php page and executing it on the server reaching the RCE.

Score
CVSS 3.1 7.2 High
Status
Modified - cve@mitre.org
Published
2020-12-15
Last modified
2024-08-04
Weaknesses
CWE-434

Affected products

References

 
 
© AVABIS GmbH privacypolicy about