CVE-2020-24199

https://notcve.org/view.php?id=CVE-2020-24199

Arbitrary File Upload in the Vehicle Image Upload component in Project Worlds Car Rental Management System v1.0 allows attackers to conduct remote code execution. Una Carga de Archivos Arbitraria en el componente Vehicle Image Upload en Project Worlds Car Rental Management System versión v1.0, permite a atacantes conducir una ejecución de código remota. • https://github.com/hyd3sec/CarRentalManagement-Unauth-RCE-WebApp https://github.com/hyd3sec/CarRentalManagement-Unauth-RCE-WebApp/blob/master/CarRental-Unauth-RCE.py https://projectworlds.in/free-projects/php-projects/car-rental-project-in-php-and-mysql • CWE-434: Unrestricted Upload of File with Dangerous Type •