Critical severity · published Mar 8, 2020
CVE-2020-10225
An unauthenticated file upload vulnerability has been identified in admin/gallery.php in PHPGurukul Job Portal 1.0
9.8
CVSS
4.3%
EPSS
No
On KEV
Description
An unauthenticated file upload vulnerability has been identified in admin/gallery.php in PHPGurukul Job Portal 1.0. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to the server, including PHP files, which could result in command execution.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)4.3% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JP
Job Portal · Phpgurukul
1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-10225
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-10225
Third Party Advisory
https://tib3rius.com/cves.html
Third Party Advisory
https://www.exploit-db.com/exploits/47881
More from Job Portal
8.8
CVE-2024-8463
File upload restriction bypass vulnerability in Job Portal
7.5
CVE-2024-8470
SQL injection vulnerability in Job Portal
7.5
CVE-2024-8469
SQL injection vulnerability in Job Portal
7.5
CVE-2024-8468
SQL injection vulnerability in Job Portal
7.5
CVE-2024-8467
SQL injection vulnerability in Job Portal