CVE-2021-46076
HIGHSourcecodester Vehicle Service Management System 1.0 - Code Injection
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2021-46076. PoCs published by sanupl, plsanu.
AI-analyzed exploit summary The repository provides a detailed proof-of-concept for CVE-2021-46076, demonstrating multiple file upload vulnerabilities in Sourcecodester Vehicle Service Management System 1.0 that lead to remote code execution (RCE). The exploit involves uploading a malicious PHP file via various endpoints and executing system commands through a crafted URL.
Description
Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious php file in multiple endpoints it leading to Code Execution.
Exploits (3)
The repository provides a detailed proof-of-concept for CVE-2021-46076, demonstrating multiple file upload vulnerabilities in Sourcecodester Vehicle Service Management System 1.0 that lead to remote code execution (RCE). The exploit involves uploading a malicious PHP file via various endpoints and executing system commands through a crafted URL.
The repository provides a detailed exploit for CVE-2021-46076, demonstrating multiple file upload vulnerabilities in the Vehicle Service Management System 1.0 that lead to remote code execution (RCE). The exploit involves uploading a malicious PHP file through various endpoints and executing system commands via a crafted URL.
This PoC demonstrates multiple file upload vulnerabilities in Vehicle Service Management System 1.0, allowing an attacker to upload malicious PHP files and achieve remote code execution via crafted payloads.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H