VULNERABILITY INTELLIGENCE

CVE-2020-28072

CVSS score7.2 HIGH
EPSS probability2.68%
CISA KEVNot currently listed
Published2020-12-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

A Remote Code Execution vulnerability exists in DourceCodester Alumni Management System 1.0. An authenticated attacker can upload arbitrary file in the gallery.php page and executing it on the server reaching the RCE.

Weakness classification

  • CWE-434: Unrestricted Upload of File with Dangerous Type

Primary references