CVE-2021-26753

creationtimestamp| type| source ---|---|--- 2021-02-13 00:43:51+00:00| seen| https://t.me/cibsecurity/23570...

CVE-2021-26753

CVE-2021-26753 affects NeDi 1.9C. An authenticated user can inject PHP code via the txt HTTP POST parameter to /System-Files.php, enabling code execution and access to the underlying OS and all application data. Connected sources confirm the vulnerability details; no remediation steps are provide...