CVE-2021-46013

CRITICAL

Free School Management Software 1.0 - Remote Code Execution (RCE)

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2021-46013 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit.

Description

An unrestricted file upload vulnerability exists in Sourcecodester Free school management software 1.0. An attacker can leverage this vulnerability to enable remote code execution on the affected web server. Once a php webshell containing "<?php system($_GET["cmd"]); ?>" gets uploaded it is saved into /uploads/exam_question/ directory, and is accessible by all users.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBFree School Management Software 1.0 - Remote Code Execution (RCE)ExploitDB exploitby fuzzyap1Not analyzed1 file
ExploitDB
PoC details

References

2