Unrated severityNVD Advisory· Published Aug 27, 2020· Updated Aug 4, 2024

CVE-2020-24203

Description

Insecure File Permissions and Arbitrary File Upload in the upload pic function in updatesubcategory.php in Projects World Travel Management System v1.0 allows remote unauthenticated attackers to gain remote code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Projects World/Travel Management Systemdescription
Projectworlds/Travel Management Systemllm-fuzzy
Range: =1.0

Patches

Vulnerability mechanics

References

projectworlds.in/free-projects/php-projects/travel-management-system-project-in-php-mysql/mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000