CVE-2021-45411

9.8 criticalEPSS 3.9%

Critical (9.8) in printable staff id card creator system project printable staff id card creator system. EPSS 3.9% chance of exploitation in the next 30 days.

In Sourcecodetester Printable Staff ID Card Creator System 1.0 after compromising the database via SQLi, an attacker can log in and leverage an arbitrary file upload vulnerability to obtain remote code execution.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.9% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2022-01-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

printable_staff_id_card_creator_system_project:printable_staff_id_card_creator_system

References

https://www.exploit-db.com/exploits/49877
https://www.sourcecodester.com/php/12802/php-staff-id-card-creation-and-printing-system.html
https://www.exploit-db.com/exploits/49877
https://www.sourcecodester.com/php/12802/php-staff-id-card-creation-and-printing-system.html

Check your stack JSON