NetSight
critical9.8

CVE-2021-25207

Arbitrary file upload vulnerability in SourceCodester E-Commerce Website v 1.0 allows attackers to execute arbitrary code via the file upload to prodViewUpdate…

Impact

Arbitrary file upload vulnerability in SourceCodester E-Commerce Website v 1.0 allows attackers to execute arbitrary code via the file upload to prodViewUpdate.php.

Affected products

VendorProductAffected versions
E-Commerce Website ProjectE-Commerce Website
Version 1.0

Weakness classification

References