CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2021-42671
High (7.5) in engineers online portal project engineers online portal. EPSS 20% chance of exploitation in the next 30 days.
An incorrect access control vulnerability exists in Sourcecodester Engineers Online Portal in PHP in nia_munoz_monitoring_system/admin/uploads. An attacker can leverage this vulnerability in order to bypass access controls and access all the files uploaded to the web server without the need of authentication or authorization.
Severity
- EPSS
- 20% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
- CWE
- CWE-425
- Published
- Modified
- Record from
- the NVD, synced
Affected
- engineers_online_portal_project:engineers_online_portal
References
- https://github.com/TheHackingRabbi/CVE-2021-42671
- https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-42671
- https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html
- https://github.com/TheHackingRabbi/CVE-2021-42671
- https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-42671