CVE-2019-20183

HIGHNuclei

Simple Employee Records System 1.0 - Unrestricted File Upload

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2019-20183 has a selected CVSS score of 7.2 (high); EIP currently links 1 Nuclei template.

Description

uploadimage.php in Employee Records System 1.0 allows upload and execution of arbitrary PHP code because file-extension validation is only on the client side. The attacker can modify global.js to allow the .php extension.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Nuclei templates

1
ProjectDiscoveryHIGHSimple Employee Records System 1.0 - Unrestricted File UploadCVSS 7.2

Simple Employee Records System 1.0 contains an arbitrary file upload vulnerability due to client-side validation of file extensions. This can be used to upload executable code to the server to obtain access or perform remote command execution.

Impact

Successful exploitation of this vulnerability can result in unauthorized access to the system, remote code execution, and potential compromise of sensitive data.

Remediation

Apply the latest patch or update to Simple Employee Records System 1.0 to fix the unrestricted file upload vulnerability.

WeaknessesCWE-434
Authorspikpikcu, j4vaovo
Template tagscvecve2019edbrcefileuploadintrusiveemployee_records_system_projectvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:employee_records_system_project:employee_records_system:1.0:*:*:*:*:*:*:*
https://www.exploit-db.com/exploits/49596 https://medium.com/@Pablo0xSantiago/cve-2019-20183-employee-records-system-bypass-file-upload-to-rce-ea2653660b34 https://nvd.nist.gov/vuln/detail/CVE-2019-20183 https://medium.com/%40Pablo0xSantiago/cve-2019-20183-employee-records-system-bypass-file-upload-to-rce-ea2653660b34 https://github.com/ARPSyndicate/kenzer-templates

Source: ProjectDiscovery

References

3