Unrated severityNVD Advisory· Published Dec 15, 2020· Updated Aug 4, 2024

CVE-2020-28072

Description

A Remote Code Execution vulnerability exists in DourceCodester Alumni Management System 1.0. An authenticated attacker can upload arbitrary file in the gallery.php page and executing it on the server reaching the RCE.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

DourceCodester/Alumni Management Systemdescription
Oretnom23/Alumni Management Systemllm-fuzzy
Range: =1.0

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/160508/Alumni-Management-System-1.0-Shell-Upload.htmlmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000