CVE-2020-10224

9.8 criticalEPSS 5.5%

Critical (9.8) in phpgurukul online book store. EPSS 5.5% chance of exploitation in the next 30 days.

An unauthenticated file upload vulnerability has been identified in admin_add.php in PHPGurukul Online Book Store 1.0. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to the server, including PHP files, which could result in command execution.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 5.5% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2020-03-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

phpgurukul:online_book_store

References

https://tib3rius.com/cves.html
https://www.exploit-db.com/exploits/47887
https://tib3rius.com/cves.html
https://www.exploit-db.com/exploits/47887

Check your stack JSON