CVE-2021-46079 File upload in n/a
Remote attackers can upload malicious files to the Vehicle Service Management System, enabling HTML injection and potential code execution.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-46079?
CVE-2021-46079 is a high-severity vulnerability in n/a, published on 6 Jan 2022. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to Html Injection.
Weakness: CWE-434
Which versions are affected by CVE-2021-46079?
It affects 1 product.
Products include Vehicle Service Management System Project Vehicle Service Management System.
How do I fix CVE-2021-46079?
No fix has been published for CVE-2021-46079 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-46079 being exploited?
There is no known exploitation of CVE-2021-46079 in the wild and no public exploit code.
Public exploit code: 2 proofs of concept on GitHub.
Other vulnerabilities in n/a
- CVE-2021-46067 Cross-site scripting in n/a
- CVE-2021-46076 File upload in n/a
- CVE-2021-46075 Missing authorization in n/a
- CVE-2023-2092 SourceCodester Vehicle Service Management System view_service.php sql injection
- CVE-2023-2093 SourceCodester Vehicle Service Management System Login.php sql injection
Sources
Also known as GHSA-jw6j-x4ww-gq54.