CVE-2021-44593

HIGH 8.1EPSS 4.2%

Simple College Website 1.0 is vulnerable to unauthenticated file upload & remote code execution via UNION-based SQL injection in the username parameter on /admin/login.php.

CVSS v3.1: 8.1 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0: 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS: 4.24% chance of exploitation in the next 30 days, 90th percentile
Published: 2022-01-21
Updated: 2024-08-04

Proof-of-concept exploits (2)

nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44593
Mister-Joe/CVE-2021-445932★ · 2022-01-21

References

Related