.. / CVE-2020-29227

• LFI
• Nuclei
• Web

Exploit for Car Rental Management System 1.0 - Local File Inclusion (CVE-2020-29227)

Description:

Car Rental Management System 1.0 allows an unauthenticated user to perform a file inclusion attack against the /index.php file with a partial filename in the “page” parameter, leading to code execution.

Nuclei Template

View the template here CVE-2020-29227.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-29227.yaml

References: