What’s Vulnerable › Vulnerabilities

CVE-2020-28072

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-12-15 · updated 2026-06-17
• Weakness: CWE-434

Description

A Remote Code Execution vulnerability exists in DourceCodester Alumni Management System 1.0. An authenticated attacker can upload arbitrary file in the gallery.php page and executing it on the server reaching the RCE.

Affected products

• Alumni Management System Project Alumni Management System: 1.0

References

• http://packetstormsecurity.com/files/160508/Alumni-Management-System-1.0-Shell-Upload.html
• http://packetstormsecurity.com/files/160508/Alumni-Management-System-1.0-Shell-Upload.html

Get alerted when CVE-2020-28072 or the next vulnerability affects your stack