What’s Vulnerable › Vulnerabilities

CVE-2020-29227

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 16.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-12-14 · updated 2026-06-17

Description

An issue was discovered in Car Rental Management System 1.0. An unauthenticated user can perform a file inclusion attack against the /index.php file with a partial filename in the "page" parameter, to cause local file inclusion resulting in code execution.

Affected products

• Car Rental Management System Project Car Rental Management System: 1.0

References

• https://loopspell.medium.com/cve-2020-29227-unauthenticated-local-file-inclusion-7d3bd2c5c6a5
• https://www.sourcecodester.com/php/14544/car-rental-management-system-using-phpmysqli-source-code.html
• https://loopspell.medium.com/cve-2020-29227-unauthenticated-local-file-inclusion-7d3bd2c5c6a5
• https://www.sourcecodester.com/php/14544/car-rental-management-system-using-phpmysqli-source-code.html

Get alerted when CVE-2020-29227 or the next vulnerability affects your stack