// For flags

CVE-2021-41644

 

Severity Score

9.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

2
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Remote Code Exection (RCE) vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that bypasses the image upload filters.

Se presenta una vulnerabilidad de Ejecución de Código Remota (RCE) en Sourcecodester Online Food Ordering System versión 2.0, por medio de un archivo PHP diseñado maliciosamente que omite los filtros de carga de imágenes

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2021-09-27 CVE Reserved
  • 2021-10-29 CVE Published
  • 2021-10-29 First Exploit
  • 2024-08-04 CVE Updated
  • 2024-09-20 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-434: Unrestricted Upload of File with Dangerous Type
CAPEC
References (2)
URL Tag Source
URL Date SRC
https://github.com/hax3xploit/CVE-2021-41644 2021-10-29
https://www.exploit-db.com/exploits/50305 2024-08-04
URL Date SRC
URL Date SRC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Online Food Ordering System Project
Search vendor "Online Food Ordering System Project"
 Online Food Ordering System
Search vendor "Online Food Ordering System Project" for product "Online Food Ordering System"
 2.0
Search vendor "Online Food Ordering System Project" for product "Online Food Ordering System" and version "2.0"
-
Affected