CVE-2021-45003

Critical

Laundry Booking Management System 1.0 (Latest) and previous versions are affected by a remote code execution (RCE) vulnerability in…

mitre·CWE-276·Published 2022-01-10

CVSS

9.8

EPSS

0.03

KEV

Exploits

cve.orgen

210 chars

Laundry Booking Management System 1.0 (Latest) and previous versions are affected by a remote code execution (RCE) vulnerability in profile.php through the "image" parameter that can execute a webshell payload.

NVDen

210 chars

NVDes

254 chars

Laundry Booking Management System versión 1.0 (Ultima) y versiones anteriores están afectadas por una vulnerabilidad de ejecución de código remota (RCE) en el archivo profile.php mediante el parámetro "image" que puede ejecutar una carga útil de webshell

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	7.5	10.0	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H