CVE-2021-42671

EUVD-2021-29632
An incorrect access control vulnerability exists in Sourcecodester Engineers Online Portal in PHP in nia_munoz_monitoring_system/admin/uploads. An attacker can leverage this vulnerability in order to bypass access controls and access all the files uploaded to the web server without the need of authentication or authorization.
Forced Browsing
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 91%
Affected Products (NVD)
VendorProductVersion
engineers_online_portal_projectengineers_online_portal
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/TheHackingRabbi/CVE-2021-42671
https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-42671
https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html
https://github.com/TheHackingRabbi/CVE-2021-42671
https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-42671
https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html