CVE-2020-24203: Malicious File Upload
Published Aug 27, 2020
·Updated
Insecure File Permissions and Arbitrary File Upload in the upload pic function in updatesubcategory.php in Projects World Travel Management System v1.0 allows remote unauthenticated attackers to gain remote code execution.
Affected Software
1 affected component
Projectworlds Travel management System=1.0
Event History
Aug 27, 2020
CVE Published
via MITRE·05:20 PM
Data Sourced
via MITRE·05:20 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2020-24203.
2
What is the severity rating for CVE-2020-24203?
The severity rating for CVE-2020-24203 is critical with a value of 9.8.
3
How does CVE-2020-24203 impact Projects World Travel Management System v1.0?
CVE-2020-24203 allows remote unauthenticated attackers to gain remote code execution in Projects World Travel Management System v1.0.
4
What is the CWE ID for CVE-2020-24203?
The CWE ID for CVE-2020-24203 is 425 and 434.
5
How can I fix the Insecure File Permissions and Arbitrary File Upload vulnerability in Projects World Travel Management System v1.0?
To fix the vulnerability, ensure that proper file permissions are set and validate user input before allowing file uploads.