employee_records_system 漏洞

严重CVE-2021-44622025/11/10

Employee Records System 1.0 - Unauthenticated File Upload RCE

Employee Records System version 1.0 contains an unrestricted file upload vulnerability that allows a remote unauthenticated attacker to upload arbitrary files via the uploadID.php endpoint; uploaded files can be executed because the application does not perform proper server-side validation. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-06 UTC.

employee_records_systemPoC 已收录

CVSS9.3

高危CVE-2019-201832020/01/09

Simple Employee Records System 1.0 - Unrestricted File Upload

Simple Employee Records System 1.0 contains an arbitrary file upload vulnerability due to client-side validation of file extensions. This can be used to upload executable code to the server to obtain access or perform remote command execution.

employee_records_systemPoC 已收录

CVSS7.2EPSS 70.0%

employee_records_system

关联漏洞

Employee Records System 1.0 - Unauthenticated File Upload RCE

Simple Employee Records System 1.0 - Unrestricted File Upload