CVE-2020-10225

9.8 criticalEPSS 4.3%

Critical (9.8) in phpgurukul job portal. EPSS 4.3% chance of exploitation in the next 30 days.

An unauthenticated file upload vulnerability has been identified in admin/gallery.php in PHPGurukul Job Portal 1.0. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to the server, including PHP files, which could result in command execution.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 4.3% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2020-03-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

phpgurukul:job_portal

References

https://tib3rius.com/cves.html
https://www.exploit-db.com/exploits/47881
https://tib3rius.com/cves.html
https://www.exploit-db.com/exploits/47881

Check your stack JSON