First published: Mon Dec 14 2020(Updated: )
An issue was discovered in Car Rental Management System 1.0. An unauthenticated user can perform a file inclusion attack against the /index.php file with a partial filename in the "page" parameter, to cause local file inclusion resulting in code execution.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Car Rental Management System | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-29227 is a critical vulnerability in Car Rental Management System 1.0 that allows an unauthenticated user to perform a file inclusion attack and execute code.
CVE-2020-29227 allows an unauthenticated user to exploit a file inclusion vulnerability and execute arbitrary code in Car Rental Management System 1.0.
CVE-2020-29227 has a severity rating of 9.8 (Critical).
To fix CVE-2020-29227, it is recommended to apply the latest security patch or update provided by the Car Rental Management System project.
You can find more information about CVE-2020-29227 in the following references: [Link 1](https://loopspell.medium.com/cve-2020-29227-unauthenticated-local-file-inclusion-7d3bd2c5c6a5) [Link 2](https://www.sourcecodester.com/php/14544/car-rental-management-system-using-phpmysqli-source-code.html)