60
CVE-2020-29227
- CVSS 3.1
- 9.8 critical
- EPSS
- 17%p97
- Published
- ·
- Modified
Description · NVD
An issue was discovered in Car Rental Management System 1.0. An unauthenticated user can perform a file inclusion attack against the /index.php file with a partial filename in the "page" parameter, to cause local file inclusion resulting in code execution.
- Products
- car rental management system
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H