CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2021-25208

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0050%
EPSS Percentile1.60th
Published2021年7月23日
Last Modified2024年11月21日

Vulnerability Description

Arbitrary file upload vulnerability in SourceCodester Travel Management System v 1.0 allows attackers to execute arbitrary code via the file upload to updatepackage.php.

Affected Platforms (CPE)

📦
Travel Management System Project

Travel Management System

= 1.0

References & Advisories

🔗 https://github.com/BigTiger2020/Travel-Management-System/blob/main/Travel%20Management%20System.md
🔗 https://github.com/BigTiger2020/Travel-Management-System/blob/main/Travel%20Management%20System.md

相關漏洞威脅

CVE-2020-242039.8

Insecure File Permissions and Arbitrary File Upload in the upload pic function in updatesubcategory.php in Projects World Travel M...

CVE-2021-252139.8

SQL injection vulnerability in SourceCodester Travel Management System v 1.0 allows remote attackers to execute arbitrary SQL stat...

CVE-2021-021110.0

An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon ...

CVE-2021-2124310.0

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, a Kubernetes REST endpoint exposes two methods that deser...