Remote code execution

2022-03-1722:15:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.035 Low

EPSS

Percentile

91.6%

JSON

A Remote Code Execution (RCE) vulnerability exists in Sourcecodester Attendance and Payroll System v1.0 which allows an unauthenticated remote attacker to upload a maliciously crafted PHP via photo upload.

CPENameOperatorVersion
attendance_and_payroll_systemeq1.0

CPE	Name	Operator	Version
	attendance_and_payroll_system	eq	1.0

References

sourcecodester.com

www.exploit-db.com/exploits/50801

www.sourcecodester.com/sites/default/files/download/oretnom23/apsystem.zip