CVE-2021-41661

Church Management System version 1.0 is affected by a SQL anjection vulnerability through creating a user with a PHP file as an avatar image, which is accessible through the /uploads directory. This can lead to RCE on the web server by uploading a PHP webshell...

CVE-2021-41661

creationtimestamp| type| source ---|---|--- 2022-06-14 02:18:16+00:00| seen| https://t.me/cibsecurity/44345...

CVE-2021-41661

CVE-2021-41661 affects Church Management System v1.0. The vulnerability described is a SQL injection caused by using a PHP file as a user avatar uploaded to /uploads, which can lead to remote code execution on the web server via a PHP webshell. The NVD metrics indicate a high/critical impact (CVS...