CVE-2021-46013

CRITICO 9.8CVE-2021-46013 · Published 18/01/2022 · updated 17/06/2026

In breve

CVE-2021-46013 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda free school management software (free school management software project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 3.5%, superiore al 89.1% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
free school management software free_school_management_software_project	`= 1.0`	No fix yet

Description

An unrestricted file upload vulnerability exists in Sourcecodester Free school management software 1.0. An attacker can leverage this vulnerability to enable remote code execution on the affected web server. Once a php webshell containing "<?php system($_GET["cmd"]); ?>" gets uploaded it is saved into /uploads/exam_question/ directory, and is accessible by all users.

References

exploit-db.com/exploits/50587 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free