CVE-2020-28072 in Alumni Management Systeminfo

Summary

by MITRE • 12/16/2020

A Remote Code Execution vulnerability exists in DourceCodester Alumni Management System 1.0. An authenticated attacker can upload arbitrary file in the gallery.php page and executing it on the server reaching the RCE.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Disclosure

12/16/2020

Moderation

accepted

CPE

ready

EPSS

0.02569

KEV

no

Activities

very low

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2020-28072
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2020-28072
CVE Detailshttps://www.cvedetails.com/cve/CVE-2020-28072/

◂ PreviousOverviewNext ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!