CVE-2020-24202

https://notcve.org/view.php?id=CVE-2020-24202

File Upload component in Projects World House Rental v1.0 suffers from an arbitrary file upload vulnerability with regular users, which allows remote attackers to conduct code execution. El componente File Upload en Projects World House Rental versión v1.0, sufre una vulnerabilidad de carga de archivos arbitraria con usuarios regulares, lo que permite a atacantes remotos conducir una ejecución de código • https://github.com/hyd3sec/HouseRental_Unauth_RCE/blob/master/HouseRentalRCE.py https://projectworlds.in/free-projects/php-projects/house-rental-and-property-listing-project-php-mysql • CWE-434: Unrestricted Upload of File with Dangerous Type •