nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2021-26809 CVE-2021-26809
CRITICAL
Car Rental Project 2.0 - Arbitrary File Upload to Remote Code Execution
Record summary
CVE-2021-26809 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit.
Description
PHPGurukul Car Rental Project version 2.0 suffers from a remote shell upload vulnerability in changeimage1.php.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBCar Rental Project 2.0 - Arbitrary File Upload to Remote Code ExecutionExploitDB exploitby Jannick TigerNot analyzed1 file
References
3packetstormsecurity.com
https://packetstormsecurity.com/files/161267/Car-Rental-Project-2.0-Shell-Upload.html exploit-db.com
https://www.exploit-db.com/exploits/49520