PT-2020-16879 · Sourcecodester · Sourcecodester Car Rental Management System

Published 2020-10-28 · Updated 2020-11-03 · CVE-2020-27956

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SourceCodester Car Rental Management System version 1.0

Description The issue allows remote code execution due to an arbitrary file upload vulnerability in the Upload Image component. This is possible because .php files can be uploaded to the admin/assets/uploads/ directory, which is under the web root, via the admin/index.php?page=manage car endpoint.

Recommendations For SourceCodester Car Rental Management System version 1.0, consider restricting access to the Upload Image component to prevent arbitrary file uploads until a patch is available. As a temporary workaround, restrict write access to the admin/assets/uploads/ directory to minimize the risk of exploitation.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2020-27956

Affected Products

Sourcecodester Car Rental Management System

References · 5

• 🔥 https://exploit-db.com/exploits/48931 · Exploit
• https://osv.dev/vulnerability/CVE-2020-27956 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-27956 · Security Note
• https://t.me/cibsecurity/15673 · Telegram Post
• https://sourcecodester.com/php/14544/car-rental-management-system-using-phpmysqli-source-code.html · Note