by Kastro
Paper/Archive/CVE-2021-45411

CVE-2021-45411

mitre — In Sourcecodetester Printable Staff ID Card Creator System 1.0 after compromising the database via SQLi, an attacker can log in and lever…

EPSS 4%CVSS 9.8
critical.is priorityof 100
47
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 90.2.902 × 2018.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

In Sourcecodetester Printable Staff ID Card Creator System 1.0 after compromising the database via SQLi, an attacker can log in and leverage an arbitrary file upload vulnerability to obtain remote code execution.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refsourcecodester.com/php/12802/php-staff-id-card-creation-and-printing-system.htmlrefexploit-db.com/exploits/49877