CVE-2020-29227 in Car Rental Management System

Riassunto

di MITRE • 14/12/2020

An issue was discovered in Car Rental Management System 1.0. An unauthenticated user can perform a file inclusion attack against the /index.php file with a partial filename in the "page" parameter, to cause local file inclusion resulting in code execution.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Prenotare: 27/11/2020
• Divulgazione: 14/12/2020
• Moderazione: accettato
• Voce: VDB-166153
• CPE: pronto
• CWE: CWE-73 (confermato)
• CVSS: 6.3 (VulDB)
• EPSS: 0.16822
• KEV: no
• Attività: molto basso
• Settore: Education, Agriculture, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-29227
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-29227
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-29227/