CVE-2021-45835
Last modified
CVE-2021-45835 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. The Online Admission System 1.0 allows an unauthenticated attacker to upload or transfer files of dangerous types to the application through documents.php, which may be used to execute malicious code or lead to code execution.. EPSS estimates a 2.97% chance of exploitation in the next 30 days.
Description
The Online Admission System 1.0 allows an unauthenticated attacker to upload or transfer files of dangerous types to the application through documents.php, which may be used to execute malicious code or lead to code execution.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Online Admission System Project | Online Admissions System | 1.0 |
References
- https://github.com/rskoolrash/Online-Admission-SystemThird Party Advisory
- https://github.com/rskoolrash/Online-Admission-System/issues/2Issue Tracking, Third Party Advisory
- https://www.exploit-db.com/exploits/50623Exploit, Third Party Advisory, VDB Entry
- https://github.com/rskoolrash/Online-Admission-SystemThird Party Advisory
- https://github.com/rskoolrash/Online-Admission-System/issues/2Issue Tracking, Third Party Advisory
- https://www.exploit-db.com/exploits/50623Exploit, Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-45835?
How severe is CVE-2021-45835?
How do I fix CVE-2021-45835?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-45829HDF5 1.13.1-1 is affected by: segmentation fault, which caus…5.5
- CVE-2021-45830A heap-based buffer overflow vulnerability exists in HDF5 1.…5.5
- CVE-2021-45831A Null Pointer Dereference vulnerability exitgs in GPAC 1.0.…5.5
- CVE-2021-45832A Stack-based Buffer Overflow Vulnerability exists in HDF5 1…5.5
- CVE-2021-45833A Stack-based Buffer Overflow Vulnerability exists in HDF5 1…5.5
- CVE-2021-45834An attacker can upload or transfer files of dangerous types …9.8
- CVE-2021-45836An authenticated attacker can execute arbitrary commands as …8.8
- CVE-2021-45837It is possible to execute arbitrary commands as root in Terr…9.8
- CVE-2021-45839It is possible to obtain the first administrator's hash set …6.5
- CVE-2021-45840It is possible to execute arbitrary commands as root in Terr…9.8
- CVE-2021-45841In Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517),…8.1
- CVE-2021-45842It is possible to obtain the first administrator's hash set …7.5
Are you affected by CVE-2021-45835?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
