CVE-2021-26610

The CVE-2021-26610 entry concerns NHN Commerce godomall5’s file upload routine, where move_uploaded_file does not perform an integrity check on file extension/authority. This omission can allow an attacker to upload malicious files, potentially leading to remote arbitrary code execution. Public s...

CVE-2021-26610 godomall5 remote code execution vulnerability

The moveuploadedfile function in godomall5 does not perform an integrity check of extension or authority when user upload file. This vulnerability allows an attacker to execute an remote arbitrary code...