CVE-2020-10225
CRITICALPhpgurukul Job Portal - Unrestricted File Upload
Title source: ruleDescription
An unauthenticated file upload vulnerability has been identified in admin/gallery.php in PHPGurukul Job Portal 1.0. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to the server, including PHP files, which could result in command execution.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Tib3rius · pythonwebappsphp
https://www.exploit-db.com/exploits/47881
Scores
CVSS v3
9.8
EPSS
0.0935
EPSS Percentile
92.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-434
Status
published
Products (1)
phpgurukul/job_portal
1.0
Published
Mar 08, 2020
Tracked Since
Feb 18, 2026