CVE-2021-36622

Sourcecodester Online Covid Vaccination Scheduler System 1.0 is affected vulnerable to Arbitrary File Upload. The admin panel has an upload function of profile photo accessible at http://localhost/scheduler/admin/?page=user. An attacker could upload a malicious file such as shell.php with the Content-Type: image/png. Then, the attacker have to visit the uploaded profile photo to access the shell.

• CWE-434

• https://www.exploit-db.com/exploits/50114Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/50114Exploit, Third Party Advisory, VDB Entry

Published

Aug 3, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-36609Cross Site Scripting (XSS) vulnerability in webTareas 2.2p1 …5.4
• CVE-2021-3661A potential security vulnerability has been identified in ce…8.4
• CVE-2021-36613Mikrotik RouterOs before stable 6.48.2 suffers from a memory…6.5
• CVE-2021-36614Mikrotik RouterOs before stable 6.48.2 suffers from a memory…6.5
• CVE-2021-3662Certain HP Enterprise LaserJet and PageWide MFPs may be vuln…5.4
• CVE-2021-36621Sourcecodester Online Covid Vaccination Scheduler System 1.0…8.1
• CVE-2021-36623Arbitrary File Upload in Sourcecodester Phone Shop Sales Man…9.8
• CVE-2021-36624Sourcecodester Phone Shop Sales Managements System version 1…9.8
• CVE-2021-36625An SQL Injection vulnerability exists in Dolibarr ERP/CRM 13…8.8
• CVE-2021-36628Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-3663firefly-iii is vulnerable to Improper Restriction of Excessi…7.5
• CVE-2021-36630DDOS reflection amplification vulnerability in eAut module o…7.5