mirror of
https://github.com/projectdiscovery/nuclei-templates.git
synced 2026-01-31 15:53:33 +08:00
Update CVE-2021-4462.yaml
This commit is contained in:
@@ -1,7 +1,7 @@
|
||||
id: CVE-2021-4462
|
||||
|
||||
info:
|
||||
name: Employee Records System 1.0 - Unauthenticated Arbitrary File Upload
|
||||
name: Employee Records System 1.0 - Unauthenticated File Upload RCE
|
||||
author: josephttd
|
||||
severity: critical
|
||||
description: |
|
||||
@@ -9,10 +9,16 @@ info:
|
||||
reference:
|
||||
- https://www.exploit-db.com/exploits/49596
|
||||
- https://www.sourcecodester.com/php/11393/employee-records-system.html
|
||||
classification:
|
||||
cvss-score: 9.8
|
||||
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
||||
cwe-id: CWE-434
|
||||
epss-score: 0.0011
|
||||
epss-percentile: 0.30009
|
||||
metadata:
|
||||
verified: true
|
||||
max-request: 2
|
||||
tags: cve,cve2021,employee-records,fileupload,unauth,intrusive,kev,vkev
|
||||
tags: cve,cve2021,employee-records,fileupload,rce,intrusive,kev,vkev
|
||||
|
||||
variables:
|
||||
string: "CVE-2021-4462"
|
||||
|
||||
Reference in New Issue
Block a user