CyberSec.Space Logo
CVEブラウザに戻る

CVE-2021-36623

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0030%
EPSS Percentile39.02th
Published2021年8月3日
Last Modified2024年11月21日

Vulnerability Description

Arbitrary File Upload in Sourcecodester Phone Shop Sales Management System 1.0 enables RCE.

Affected Platforms (CPE)

📦
Phone Shop Sales Management System Project

Phone Shop Sales Management System

= 1.0

References & Advisories

🔗 https://www.exploit-db.com/exploits/50106
🔗 https://www.exploit-db.com/exploits/50106

関連する脆弱性情報

CVE-2021-366249.8

Sourcecodester Phone Shop Sales Managements System version 1.0 suffers from a remote SQL injection vulnerability that allows for a...

CVE-2021-365609.8

Phone Shop Sales Managements System using PHP with Source Code 1.0 is vulnerable to authentication bypass which leads to account t...

CVE-2021-353374.3

Sourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct Object Reference (IDOR). Any attacker will...

CVE-2021-3467910.0

Thycotic Password Reset Server before 5.3.0 allows credential disclosure.