Update CVE-2020-29227.yaml

patch-1
Prince Chaddha 2021-07-24 12:15:24 +05:30 committed by GitHub
parent 65bddf3e33
commit f40aca136b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 1 deletions

View File

@ -5,7 +5,9 @@ info:
author: daffainfo
severity: high
description: An issue was discovered in Car Rental Management System 1.0. An unauthenticated user can perform a file inclusion attack against the /index.php file with a partial filename in the "page" parameter, to cause local file inclusion resulting in code execution.
reference: https://loopspell.medium.com/cve-2020-29227-unauthenticated-local-file-inclusion-7d3bd2c5c6a5
reference: |
- https://loopspell.medium.com/cve-2020-29227-unauthenticated-local-file-inclusion-7d3bd2c5c6a5
- https://nvd.nist.gov/vuln/detail/CVE-2020-29227
tags: cve,cve2020,lfi
requests: