CVE-2020-28136

An Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote code execution via admin/create-package.php vulnerable page.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2020-11-17

Last modified

2024-08-04

Weaknesses

CWE-434

Affected products

• Tourism Management System (Phpgurukul)

References

• https://phpgurukul.com/tourism-management-system-free-download/
• https://www.exploit-db.com/exploits/48892