CVE-2020-24195

—

CVSS 3.1

9.1 critical

EPSS

3%p86

Published

Sep 9, 2020 (Sep 9, 2020)

Modified

Jun 17, 2026

Description

An Arbitrary File Upload in the Upload Image component in Sourcecodester Online Bike Rental v1.0 allows authenticated administrator to conduct remote code execution.

Vendors: online bike rental project
Products: online bike rental
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.9%)

In the news0 stories

No ingested article mentions this CVE yet.