Unscored CVE-2021-45411 EUVD-2021-32183GHSA-v5w5-94cp-92wr

In Sourcecodetester Printable Staff ID Card Creator System 1.0 after compromising the database via SQLi, an attacker can log in and leverag…

Published Jan 12, 2022 · Updated Aug 4, 2024 · Assigned by mitre

Description

In Sourcecodetester Printable Staff ID Card Creator System 1.0 after compromising the database via SQLi, an attacker can log in and leverage an arbitrary file upload vulnerability to obtain remote code execution.

References

https://www.sourcecodester.com/php/12802/php-staff-id-card-creation-and-printing-system.html
https://www.exploit-db.com/exploits/49877