CVE-2021-41675

Katalog CVE

CVSS 7.2 · High EPSS 3,1%

Kerentanan Unrestricted Upload of File with Dangerous Type pada e-negosyo system project e-negosyo system. Skor CVSS 3.1 7.2 (High) menurut NVD.

Deskripsi (NVD)

A Remote Code Execution (RCE) vulnerabilty exists in Sourcecodester E-Negosyo System 1.0 in /admin/produts/controller.php via the doInsert function, which validates images with getImageSizei. .

Rincian

Terbit di NVD

29 Oktober 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-434: Unrestricted Upload of File with Dangerous Type

EPSS (30 hari)

3,1% peluang dieksploitasi; lebih tinggi dari 87,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/janikwehrli1/0dayHunt/blob/main/E-Negosyo-Authenticated-RCE.py exploit · advisory pihak ketiga
• https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41675 exploit · advisory pihak ketiga
• https://www.nu11secur1ty.com/2021/11/cve-2021-41675.html exploit · advisory pihak ketiga