← Zuruck zu CVEs

CVE-2021-42671

HIGH

7.5

Beschreibung

An incorrect access control vulnerability exists in Sourcecodester Engineers Online Portal in PHP in nia_munoz_monitoring_system/admin/uploads. An attacker can leverage this vulnerability in order to bypass access controls and access all the files uploaded to the web server without the need of authentication or authorization.

CVE Details

CVSS v3.1 Bewertung7.5

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht11/5/2021

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

engineers_online_portal_project:engineers_online_portal

Schwachen (CWE)

CWE-425

Referenzen

https://github.com/TheHackingRabbi/CVE-2021-42671(cve@mitre.org)

https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-42671(cve@mitre.org)

https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html(cve@mitre.org)

https://github.com/TheHackingRabbi/CVE-2021-42671(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-42671(af854a3a-2127-422b-91ae-364da2661108)

https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.