CVE-2021-41566

The file extension of the TadTools file upload function fails to filter, thus remote attackers can upload any types of files and execute arbitrary code without logging in...

CVE-2021-41566 Tad TadTools - Arbitrary File Upload

The file extension of the TadTools file upload function fails to filter, thus remote attackers can upload any types of files and execute arbitrary code without logging in...

CVE-2021-41566

CVE-2021-41566 affects Tad TadTools and is caused by the file upload function not filtering file extensions. This allows remote attackers to upload arbitrary file types and execute arbitrary code without authentication. NVD lists a CVSS v2 base score of 7.5 (HIGH) and CVSS v3.1 base score of 9.8 ...