VULNERABILITY INTELLIGENCE

CVE-2020-10225

CVSS score9.8 CRITICAL

EPSS probability4.35%

CISA KEVNot currently listed

Published2020-03-08

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An unauthenticated file upload vulnerability has been identified in admin/gallery.php in PHPGurukul Job Portal 1.0. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to the server, including PHP files, which could result in command execution.

Weakness classification

nvd@nist.gov: CWE-434

Primary references

cve@mitre.org — Third Party Advisory
cve@mitre.org — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry