VULNERABILITY INTELLIGENCE

CVE-2021-25780

CVSS score7.2 HIGH
EPSS probability2.56%
CISA KEVNot currently listed
Published2021-02-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

An arbitrary file upload vulnerability has been identified in posts.php in Baby Care System 1.0. The vulnerability could be exploited by an remote attacker to upload content to the server, including PHP files, which could result in command execution and obtaining a shell.

Weakness classification

  • CWE-434: Unrestricted Upload of File with Dangerous Type

Primary references