NetSight
critical9.8

CVE-2021-25208

Arbitrary file upload vulnerability in SourceCodester Travel Management System v 1.0 allows attackers to execute arbitrary code via the file upload to updatepa…

Impact

Arbitrary file upload vulnerability in SourceCodester Travel Management System v 1.0 allows attackers to execute arbitrary code via the file upload to updatepackage.php.

Affected products

VendorProductAffected versions
Travel Management System ProjectTravel Management System
Version 1.0

Weakness classification

References