VULNERABILITY INTELLIGENCE

CVE-2021-26610

CVSS score7.2 HIGH
EPSS probability0.45%
CISA KEVNot currently listed
Published2021-10-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

The move_uploaded_file function in godomall5 does not perform an integrity check of extension or authority when user upload file. This vulnerability allows an attacker to execute an remote arbitrary code.

Weakness classification

  • vuln@krcert.or.kr: CWE-353
  • nvd@nist.gov: CWE-345

Primary references