5
CVSSv2

CVE-2021-42671

Published: 05/11/2021 Updated: 12/07/2022
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 446
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

An incorrect access control vulnerability exists in Sourcecodester Engineers Online Portal in PHP in nia_munoz_monitoring_system/admin/uploads. An attacker can leverage this vulnerability in order to bypass access controls and access all the files uploaded to the web server without the need of authentication or authorization.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

engineers online portal project engineers online portal -

Vendor Advisories

Check Point Reference: CPAI-2021-2119 Date Published: 28 Feb 2024 Severity: High ...

Github Repositories

CVE-2021-42671 - Broken access control vulnerability in the Engineers online portal system.

CVE-2021-42671 CVE-2021-42671 - Broken access control vulnerability in the Engineers online portal system Technical description: A broken access control vulnerability exists in the Engineers Online Portal An attacker can leverage this vulnerability in order to bypass access controls and get his hands on all the files uploaded to the web server without the need of authenticati

CVE-2021-42671 - Broken access control vulnerability in the Engineers online portal system.

CVE-2021-42671 CVE-2021-42671 - Broken access control vulnerability in the Engineers online portal system Technical description: A broken access control vulnerability exists in the Engineers Online Portal An attacker can leverage this vulnerability in order to bypass access controls and get his hands on all the files uploaded to the web server without the need of authenticati