Unscored CVE-2022-28062 EUVD-2022-32547GHSA-9245-jr52-v2xm

Car Rental System v1.0 contains an arbitrary file upload vulnerability via the Add Car component which allows attackers to upload a webshel…

Published Apr 4, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

Car Rental System v1.0 contains an arbitrary file upload vulnerability via the Add Car component which allows attackers to upload a webshell and execute arbitrary code.

References

https://github.com/D4rkP0w4r/CVEs/blob/main/Car%20Rental%20System%20Upload%20%2B%20RCE/POC.md
https://hackmd.io/DUiTnVpLSVKihcyPloLdPg