What is CVE-2020-24202?

CVE-2020-24202 is an arbitrary file upload vulnerability in the File Upload component of Projects World House Rental v1.0.

What is the severity of CVE-2020-24202?

CVE-2020-24202 has a severity rating of 9.8, which is classified as critical.

How does CVE-2020-24202 affect regular users?

CVE-2020-24202 allows remote attackers to upload arbitrary files and potentially execute code on the affected system when exploited by regular users.

Is there a known fix for CVE-2020-24202?

At the moment, there is no known fix available for CVE-2020-24202. It is recommended to contact the vendor for updates or consider implementing additional security measures.

Where can I find more information about CVE-2020-24202?

You can find more information about CVE-2020-24202 at the following references: [GitHub](https://github.com/hyd3sec/HouseRental_Unauth_RCE/blob/master/HouseRentalRCE.py) and [Projectworlds](https://projectworlds.in/free-projects/php-projects/house-rental-and-property-listing-project-php-mysql/).

Vulnerability/
CVE-2020-24202

critical

9.8

CWE

434

27/8/2020

4/8/2024

CVE-2020-24202: Malicious File Upload

First published: Thu Aug 27 2020(Updated: )

File Upload component in Projects World House Rental v1.0 suffers from an arbitrary file upload vulnerability with regular users, which allows remote attackers to conduct code execution.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Projectworlds House Rental And Property Listing Project	=1.0

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2020-24202?
CVE-2020-24202 is an arbitrary file upload vulnerability in the File Upload component of Projects World House Rental v1.0.
What is the severity of CVE-2020-24202?
CVE-2020-24202 has a severity rating of 9.8, which is classified as critical.
How does CVE-2020-24202 affect regular users?
CVE-2020-24202 allows remote attackers to upload arbitrary files and potentially execute code on the affected system when exploited by regular users.
Is there a known fix for CVE-2020-24202?
At the moment, there is no known fix available for CVE-2020-24202. It is recommended to contact the vendor for updates or consider implementing additional security measures.
Where can I find more information about CVE-2020-24202?
You can find more information about CVE-2020-24202 at the following references: [GitHub](https://github.com/hyd3sec/HouseRental_Unauth_RCE/blob/master/HouseRentalRCE.py) and [Projectworlds](https://projectworlds.in/free-projects/php-projects/house-rental-and-property-listing-project-php-mysql/).

collector/nvd-index
agent/weakness
agent/severity
agent/references
agent/author
agent/tags
agent/type
agent/event
agent/description
agent/last-modified-date
agent/softwarecombine
agent/first-publish-date
collector/mitre-cve
source/MITRE
vendor/projectworlds
canonical/projectworlds house rental and property listing project
version/projectworlds house rental and property listing project/1.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.