Remote Code Execution Vulnerability in Sourcecodester Attendance and Payroll System
CVE-2021-44087
9.8CRITICAL
Key Information:
- Vendor
- CVE Published:
- 17 March 2022
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2021-44087?
A Remote Code Execution vulnerability exists in Sourcecodester Attendance and Payroll System version 1.0, enabling an unauthenticated remote attacker to exploit a weakness in the system by uploading a specially crafted PHP file through a photo upload feature. This flaw poses significant security risks as it allows malicious actors to execute arbitrary code on the server, potentially leading to unauthorized access and control over sensitive data.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.