CVE-2020-24203

Name of the Vulnerable Software and Affected Versions Projects World Travel Management System version 1.0

Description The issue concerns Insecure File Permissions and Arbitrary File Upload in the upload pic function in updatesubcategory.php, allowing remote unauthenticated attackers to gain remote code execution.

Recommendations For Projects World Travel Management System version 1.0, consider restricting access to the updatesubcategory.php file and the upload pic function until a patch is available. As a temporary workaround, restrict file uploads to only necessary and authenticated users to minimize the risk of exploitation.