sml

3 exploits Active since Nov 2025
CVE-2021-4462 EXPLOITDB CRITICAL text WORKING POC
Employee Records System 1.0 - Unauthenticated Unrestricted File Upload via uploadID.php
Employee Records System version 1.0 contains an unrestricted file upload vulnerability that allows a remote unauthenticated attacker to upload arbitrary files via the uploadID.php endpoint; uploaded files can be executed because the application does not perform proper server-side validation. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-06 UTC.
CVSS 9.8
EIP-2026-113177 EXPLOITDB text WORKING POC
Wallos < 1.11.2 - File Upload RCE
EIP-2026-107172 EXPLOITDB text WORKING POC
FOGProject 1.5.9 - File Upload RCE (Authenticated)