CVE-2020-29227

Critical · 9.8

CVSS

9.8

EPSS

16.8%

Published

Dec 14, 2020

CISA due date

—

The record

An issue was discovered in Car Rental Management System 1.0. An unauthenticated user can perform a file inclusion attack against the /index.php file with a partial filename in the "page" parameter, to cause local file inclusion resulting in code execution.

Affected packages

Ecosystem	Package	Introduced	Fixed