PT-2020-15656
CVE-2020-24203
·
تاريخ النشر
2020-08-27
·
تاريخ التحديث
2022-07-12
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Projects World Travel Management System version 1.0
Description
The issue concerns Insecure File Permissions and Arbitrary File Upload in the
upload pic function in updatesubcategory.php, allowing remote unauthenticated attackers to gain remote code execution.Recommendations
For Projects World Travel Management System version 1.0, consider restricting access to the
updatesubcategory.php file and the upload pic function until a patch is available. As a temporary workaround, restrict file uploads to only necessary and authenticated users to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾