CVE-2021-43258

Katalog CVE

CVSS 8.8 · High EPSS 11,6%

Kerentanan Unrestricted Upload of File with Dangerous Type pada churchdb churchinfo. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

CartView.php in ChurchInfo 1.3.0 allows attackers to achieve remote code execution through insecure uploads. This requires authenticated access tot he ChurchInfo application. Once authenticated, a user can add names to their cart, and compose an email. Uploading an attachment for the email stores the attachment on the site in the /tmp_attach/ folder where it can be accessed with a GET request. There are no limitations on files that can be attached, allowing for malicious PHP code to be uploaded and interpreted by the server.

Rincian

Terbit di NVD

23 November 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-434: Unrestricted Upload of File with Dangerous Type

EPSS (30 hari)

11,6% peluang dieksploitasi; lebih tinggi dari 95,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/rapid7/metasploit-framework/pull/17257 exploit · patch · advisory pihak ketiga
• http://www.churchdb.org/ product
• https://sourceforge.net/projects/churchinfo/files/ product