Lucene search
K

4 matches found

RedhatCVE
RedhatCVE
added 2025/11/11 10:44 p.m.2 views

CVE-2021-4462

Employee Records System version 1.0 contains an unrestricted file upload vulnerability that allows a remote unauthenticated attacker to upload arbitrary files via the uploadID.php endpoint; uploaded files can be executed because the application does not perform proper server-side validation...

9.8CVSS7.3AI score0.18369EPSS
Exploits2References1
EUVD
EUVD
added 2025/11/11 12:30 a.m.2 views

EUVD-2021-34713

Employee Records System version 1.0 contains an unrestricted file upload vulnerability that allows a remote unauthenticated attacker to upload arbitrary files via the uploadID.php endpoint; uploaded files can be executed because the application does not perform proper server-side validation...

9.3CVSS6.8AI score0.18369EPSS
Exploits2References4
Vulnrichment
Vulnrichment
added 2025/11/10 10:32 p.m.2 views

CVE-2021-4462 Employee Records System v1.0 Arbitrary File Upload RCE

Employee Records System version 1.0 contains an unrestricted file upload vulnerability that allows a remote unauthenticated attacker to upload arbitrary files via the uploadID.php endpoint; uploaded files can be executed because the application does not perform proper server-side...

9.3CVSS6.8AI score0.18369EPSS
Exploits2References3
Positive Technologies
Positive Technologies
added 2025/11/10 12:0 a.m.4 views

PT-2025-46216

Name of the Vulnerable Software and Affected Versions Employee Records System version 1.0 Description The Employee Records System version 1.0 has an unrestricted file upload issue. A remote, unauthenticated attacker can upload arbitrary files through the uploadID.php endpoint. The application lac...

9.8CVSS7AI score0.18369EPSS
Exploits2References8
Rows per page
Query Builder