PT-2021-23362 · Unknown · Sourcecodester One Church Management System

Published 2021-10-29 · Updated 2021-11-02 · CVE-2021-41643

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sourcecodester Church Management System version 1.0

Description A Remote Code Execution (RCE) issue exists via the image upload field, allowing for potential code execution.

Recommendations For Sourcecodester Church Management System version 1.0, consider disabling the image upload feature until a patch is available to prevent exploitation. Restrict access to the image upload field to minimize the risk of RCE attacks. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2021-41643

Affected Products

Sourcecodester One Church Management System

References · 4

• 🔥 https://exploit-db.com/exploits/50306 · Exploit
• https://osv.dev/vulnerability/CVE-2021-41643 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-41643 · Security Note
• https://t.me/cibsecurity/31468 · Telegram Post