CVE-2020-11544: Malicious File Upload
An issue was discovered in Project Worlds Official Car Rental System 1. It allows the admin user to run commands on the server with their account because the upload section on the file-manager page contains an arbitrary file upload vulnerability via addcars.php. There are no upload restrictions for executable files.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-11544?
The severity of CVE-2020-11544 is high, with a severity value of 7.2.
How does CVE-2020-11544 affect Project Worlds Official Car Rental System 1?
CVE-2020-11544 allows the admin user to run commands on the server with their account through the file-manager page's upload section.
What is the vulnerability in CVE-2020-11544?
The vulnerability in CVE-2020-11544 is an arbitrary file upload vulnerability in the add_cars.php file.
How can I fix CVE-2020-11544 in Project Worlds Official Car Rental System 1?
To fix CVE-2020-11544, restrict upload permissions and implement input validation in the add_cars.php file.
Where can I find more information about CVE-2020-11544?
You can find more information about CVE-2020-11544 at the following link: [https://frostylabs.net/writeups/cve-2020-11544/](https://frostylabs.net/writeups/cve-2020-11544/)