CVE-2020-24199: Malicious File Upload
Published Sep 9, 2020
·Updated
Arbitrary File Upload in the Vehicle Image Upload component in Project Worlds Car Rental Management System v1.0 allows attackers to conduct remote code execution.
Affected Software
1 affected component
Projectworlds Car Rental Project=1.0
Event History
Sep 9, 2020
CVE Published
via MITRE·02:16 PM
Data Sourced
via MITRE·02:16 PM
Description
Frequently Asked Questions
1
What is CVE-2020-24199?
CVE-2020-24199 is an arbitrary file upload vulnerability in the Vehicle Image Upload component in Project Worlds Car Rental Management System v1.0.
2
How severe is CVE-2020-24199?
CVE-2020-24199 has a severity rating of critical with a CVSS score of 9.8.
3
How does CVE-2020-24199 allow attackers to conduct remote code execution?
CVE-2020-24199 allows attackers to upload arbitrary files, which can then be used to execute malicious code remotely.
4
Which software versions are affected by CVE-2020-24199?
CVE-2020-24199 affects Project Worlds Car Rental Management System v1.0.
5
How can I fix CVE-2020-24199?
To fix CVE-2020-24199, apply the latest security updates or patches provided by the vendor.