Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Tib3Rius

#13644of 53,624
19.6Total CVSS
Vulnerabilities · 2
Critical
2
PT-2020-11982
9.8
2020-03-08
Phpgurukul · Phpgurukul Online Book Store · CVE-2020-10224
**Name of the Vulnerable Software and Affected Versions** PHPGurukul Online Book Store version 1.0 **Description** An unauthenticated file upload issue has been identified in the admin add.php file. This could be exploited by a remote attacker to upload content, including PHP files, potentially leading to command execution. **Recommendations** For PHPGurukul Online Book Store version 1.0, consider restricting access to the admin add.php file to prevent unauthenticated file uploads until a patch is available. As a temporary workaround, disabling the file upload functionality in admin add.php could help minimize the risk of exploitation.
PT-2020-11983
9.8
2020-03-08
Phpgurukul · Phpgurukul Job Portal · CVE-2020-10225
**Name of the Vulnerable Software and Affected Versions** PHPGurukul Job Portal version 1.0 **Description** An unauthenticated file upload issue has been identified in the admin/gallery.php file. This could be exploited by a remote attacker to upload content, including PHP files, potentially resulting in command execution. **Recommendations** For PHPGurukul Job Portal version 1.0, consider disabling the file upload functionality in admin/gallery.php until a patch is available to prevent potential command execution. Restrict access to the admin/gallery.php file to minimize the risk of exploitation.