VULNERABILITY INTELLIGENCE
CVE-2021-43258
CVSS score8.8 HIGH
EPSS probability11.82%
CISA KEVNot currently listed
Published2022-11-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
CartView.php in ChurchInfo 1.3.0 allows attackers to achieve remote code execution through insecure uploads. This requires authenticated access tot he ChurchInfo application. Once authenticated, a user can add names to their cart, and compose an email. Uploading an attachment for the email stores the attachment on the site in the /tmp_attach/ folder where it can be accessed with a GET request. There are no limitations on files that can be attached, allowing for malicious PHP code to be uploaded and interpreted by the server.
Weakness classification
- nvd@nist.gov: CWE-434
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-434
Primary references
- cve@mitre.org — Product
- cve@mitre.org — Exploit, Patch, Third Party Advisory
- cve@mitre.org — Product
- af854a3a-2127-422b-91ae-364da2661108 — Product
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Product