Lucene search

K
cvelistMitreCVELIST:CVE-2021-29377
HistoryAug 12, 2021 - 9:50 p.m.

CVE-2021-29377

2021-08-1221:50:15
mitre
www.cve.org
4
pear admin think through
arbitrary file upload
uploadservice vulnerability
remote code execution

AI Score

10

Confidence

High

EPSS

0.005

Percentile

76.1%

Pear Admin Think through 2.1.2 has an arbitrary file upload vulnerability that allows attackers to execute arbitrary code remotely. A .php file can be uploaded via admin.php/index/upload because app/common/service/UploadService.php mishandles fileExt.

AI Score

10

Confidence

High

EPSS

0.005

Percentile

76.1%

Related for CVELIST:CVE-2021-29377