CVE-2021-42671

An incorrect access control vulnerability exists in Sourcecodester Engineers Online Portal in PHP in nia_munoz_monitoring_system/admin/uploads. An attacker can leverage this vulnerability in order to bypass access controls and access all the files uploaded to the web server without the need of authentication or authorization.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2021-11-05

Last modified

2024-08-04

Weaknesses

CWE-425

Affected products

• Engineers Online Portal (Engineers Online Portal Project)

References

• https://github.com/TheHackingRabbi/CVE-2021-42671
• https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-42671
• https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html