CVEvulnerability
CVE-2021-45411
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2022-01-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-434
Description
In Sourcecodetester Printable Staff ID Card Creator System 1.0 after compromising the database via SQLi, an attacker can log in and leverage an arbitrary file upload vulnerability to obtain remote code execution.
Affected configurations
• printable staff id card creator system project printable staff id card creator system 1.0
Related
Weakness · CWE (1)
- CWE-434 Unrestricted Upload of File with Dangerous Type weakness
References
- https://www.exploit-db.com/exploits/49877 Exploit, Third Party Advisory, VDB Entry
- https://www.sourcecodester.com/php/12802/php-staff-id-card-creation-and-printing-system.html Third Party Advisory
- https://www.exploit-db.com/exploits/49877 Exploit, Third Party Advisory, VDB Entry
- https://www.sourcecodester.com/php/12802/php-staff-id-card-creation-and-printing-system.html Third Party Advisory