CVE-2021-47899

MEDIUM

YetiShare File Hosting Script 5.1.0 - SSRF

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2021-47899. PoCs published by numan türle.

AI-analyzed exploit summary This exploit demonstrates a Server-Side Request Forgery (SSRF) vulnerability in YetiShare File Hosting Script 5.1.0. The vulnerability arises from insufficient validation of user-supplied URLs in the remote file upload feature, allowing an attacker to read local files via the `file://` protocol.

Description

YetiShare File Hosting Script 5.1.0 contains a server-side request forgery vulnerability that allows attackers to read local system files through the remote file upload feature. Attackers can exploit the url parameter in the url_upload_handler endpoint to access sensitive files like /etc/passwd by using file:/// protocol.

Exploits (1)

exploitdb WORKING POC
by numan türle · textwebappsphp
https://www.exploit-db.com/exploits/49534

This exploit demonstrates a Server-Side Request Forgery (SSRF) vulnerability in YetiShare File Hosting Script 5.1.0. The vulnerability arises from insufficient validation of user-supplied URLs in the remote file upload feature, allowing an attacker to read local files via the `file://` protocol.

Classification
Working Poc 95%
Attack Type
Ssrf
Complexity
Trivial
Reliability
Reliable
Target: YetiShare File Hosting Script v5.1.0
Auth required
Prerequisites: Valid session cookies for authentication · Access to the target's `/ajax/url_upload_handler` endpoint
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Exploit, Third Party Advisory exploit
https://www.exploit-db.com/exploits/49534
Various Sources product
https://mfscripts.com
Various Sources product
https://yetishare.com

Scores

CVSS v3 4.0
EPSS 0.0026
EPSS Percentile 16.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-434
Status published
Published Jan 23, 2026
Tracked Since Feb 18, 2026