CyberSec.Space Logo
Back to CVE Browser

CVE-2021-25208

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0050%
EPSS Percentile1.60th
PublishedJul 23, 2021
Last ModifiedNov 21, 2024

Vulnerability Description

Arbitrary file upload vulnerability in SourceCodester Travel Management System v 1.0 allows attackers to execute arbitrary code via the file upload to updatepackage.php.

Affected Platforms (CPE)

📦
Travel Management System Project

Travel Management System

= 1.0

References & Advisories

🔗 https://github.com/BigTiger2020/Travel-Management-System/blob/main/Travel%20Management%20System.md
🔗 https://github.com/BigTiger2020/Travel-Management-System/blob/main/Travel%20Management%20System.md

Related Vulnerabilities

CVE-2020-242039.8

Insecure File Permissions and Arbitrary File Upload in the upload pic function in updatesubcategory.php in Projects World Travel M...

CVE-2021-252139.8

SQL injection vulnerability in SourceCodester Travel Management System v 1.0 allows remote attackers to execute arbitrary SQL stat...

CVE-2021-3467910.0

Thycotic Password Reset Server before 5.3.0 allows credential disclosure.

CVE-2021-021110.0

An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon ...