CVE-2021-41675

PoC ×3—

CVSS 3.1

7.2 high

EPSS

3%p87

Published

Oct 29, 2021 (Oct 29, 2021)

Modified

Jun 17, 2026

Description

A Remote Code Execution (RCE) vulnerabilty exists in Sourcecodester E-Negosyo System 1.0 in /admin/produts/controller.php via the doInsert function, which validates images with getImageSizei. .

Vendors: e-negosyo system project
Products: e-negosyo system
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.1%)

In the news0 stories

No ingested article mentions this CVE yet.