CVE-2021-47819
CRITICAL
9.8
CVSS Severity Score
Vulnerability Description
ProjeQtOr Project Management 9.1.4 contains a file upload vulnerability that allows guest users to upload malicious PHP files with arbitrary code execution capabilities. Attackers can upload a PHP script through the profile attachment section and execute system commands by accessing the uploaded file with a specially crafted request parameter.
Affected Platforms (CPE)
No CPE configurations currently published for this record.