PT-2021-23652 · Unknown · Sourcecodester Engineers Online Portal

0Xdeku + 1 · Published 2021-11-05 · Updated 2022-07-12 · CVE-2021-42671

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sourcecodester Engineers Online Portal (affected versions not specified)

Description An incorrect access control issue exists in the Sourcecodester Engineers Online Portal in PHP, specifically in the nia munoz monitoring system/admin/uploads directory. This allows an attacker to bypass access controls and access all files uploaded to the web server without needing authentication or authorization.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-425

Related Identifiers

CVE-2021-42671

Affected Products

Sourcecodester Engineers Online Portal

References · 6

• 🔥 https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-42671 · Exploit
• 🔥 https://github.com/TheHackingRabbi/CVE-2021-42671 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-42671 · Security Note
• https://t.me/cibsecurity/31875 · Telegram Post
• https://t.me/cvenotify/23811 · Telegram Post
• https://sourcecodester.com/php/13115/engineers-online-portal-php.html · Note