A Remote Code Execution (RCE) vulnerabilty exists in Sourcecodester E-Negosyo System 1.0 in /admin/produts/controller.php via the doInsert function, which validates images with getImageSizei. .
References
Link | Resource |
---|---|
https://github.com/janikwehrli1/0dayHunt/blob/main/E-Negosyo-Authenticated-RCE.py | Exploit Third Party Advisory |
https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41675 | Exploit Third Party Advisory |
https://www.nu11secur1ty.com/2021/11/cve-2021-41675.html | Exploit Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2021-10-29T15:38:24
Updated: 2021-11-23T16:21:51
Reserved: 2021-09-27T00:00:00
Link: CVE-2021-41675
JSON object: View
NVD Information
Status : Analyzed
Published: 2021-10-29T16:15:07.643
Modified: 2021-11-28T23:31:22.793
Link: CVE-2021-41675
JSON object: View
Redhat Information
No data.
CWE