CVE-2020-28130

https://notcve.org/view.php?id=CVE-2020-28130

An Arbitrary File Upload in the Upload Image component in SourceCodester Online Library Management System 1.0 allows the user to conduct remote code execution via admin/borrower/index.php?view=add because .php files can be uploaded to admin/borrower/photos (under the web root). Una Carga de Archivos Arbitraria en el componente Upload Image en SourceCodester Online Library Management System versión 1.0, permite al usuario conducir una ejecución de código remota por medio de admin/borrower/index.php?view=add porque los archivos .php pueden ser cargados en admin/borrower/photos ( bajo la root web) • https://www.exploit-db.com/exploits/48928 https://www.sourcecodester.com/php/14545/online-library-management-system-phpmysqli-full-source-code-2020.html • CWE-434: Unrestricted Upload of File with Dangerous Type •