CVE-2021-40845

The web part of Zenitel AlphaCom XE Audio Server through 11.2.3.10, called AlphaWeb XE, does not restrict file upload in the Custom Scripts section at php/index.php. Neither the content nor extension of the uploaded files is checked, allowing execution of PHP code under the /cmd directory.

• CWE-434

• http://packetstormsecurity.com/files/164149/Zenitel-AlphaCom-XE-Audio-Server-11.2.3.10-Shell-Upload.htmlThird Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/164160/Zenitel-AlphaCom-XE-Audio-Server-11.2.3.10-Shell-Upload.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/ricardojoserf/CVE-2021-40845Exploit, Third Party Advisory
• https://ricardojoserf.github.io/CVE-2021-40845/Exploit, Third Party Advisory
• http://packetstormsecurity.com/files/164149/Zenitel-AlphaCom-XE-Audio-Server-11.2.3.10-Shell-Upload.htmlThird Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/164160/Zenitel-AlphaCom-XE-Audio-Server-11.2.3.10-Shell-Upload.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/ricardojoserf/CVE-2021-40845Exploit, Third Party Advisory
• https://ricardojoserf.github.io/CVE-2021-40845/Exploit, Third Party Advisory

Published

Sep 15, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-40839The rencode package through 1.0.6 for Python allows an infin…7.5
• CVE-2021-4084pimcore is vulnerable to Improper Neutralization of Input Du…6.1
• CVE-2021-40840A Stored XSS issue exists in the admin/users user administra…5.4
• CVE-2021-40841A Path Traversal vulnerability for a log file in LiveConfig …6.5
• CVE-2021-40842Proofpoint Insider Threat Management Server contains a SQL i…9.8
• CVE-2021-40843Proofpoint Insider Threat Management Server contains an unsa…7.3
• CVE-2021-40846An issue was discovered in Rhinode Trading Paints through 2.…7.5
• CVE-2021-40847The update process of the Circle Parental Control Service on…8.1
• CVE-2021-40848In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exp…7.8
• CVE-2021-40849In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, the…9.8
• CVE-2021-40850TCMAN GIM is vulnerable to a SQL injection vulnerability ins…9.8
• CVE-2021-40851TCMAN GIM is vulnerable to a lack of authorization in all av…7.5