CVE-2021-42671
High · 7.5CVSS
7.5
EPSS
19.7%
Published
Nov 5, 2021
CISA due date
—
The record
An incorrect access control vulnerability exists in Sourcecodester Engineers Online Portal in PHP in nia_munoz_monitoring_system/admin/uploads. An attacker can leverage this vulnerability in order to bypass access controls and access all the files uploaded to the web server without the need of authentication or authorization.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-14953 A low-privileged remote attacker can enumerate all configured users and identify which… CWE-425
- CVE-2026-76799 A weakness has been identified in code-projects Login Registration System 1.0. CWE-425
- CVE-2026-19903 A vulnerability has been found in SourceCodester Online Clothing Store 1.0. CWE-425
- CVE-2026-21760 HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced… CWE-425
- CVE-2026-10521 An high privileged remote attacker can access a hidden configuration method, that should… CWE-425
- CVE-2026-9610 IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9… CWE-425
- CVE-2026-34028 The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, exposes… CWE-425
- CVE-2026-11986 A flaw was found in the admin-ui-ext component of Keycloak, which provides extended… CWE-425