CVE-2021-36622 - CVE House
Back to Database
Status published Critical CVE-2021-36622

Sourcecodester Online Covid Vaccination Scheduler System 1.0 is affected vulnerable...

Vulnerability Description

Sourcecodester Online Covid Vaccination Scheduler System 1.0 is affected vulnerable to Arbitrary File Upload. The admin panel has an upload function of profile photo accessible at http://localhost/scheduler/admin/?page=user. An attacker could upload a malicious file such as shell.php with the Content-Type: image/png. Then, the attacker have to visit the uploaded profile photo to access the shell.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-36622

Credits & Attribution

No credits recorded in the NVD database.

References

More from online covid vaccination scheduler system project

View All →
CVE-2021-41930
Cross site scripting (XSS) vulnerability in Sourcecodester Online Covid Vaccination...
Medium 6.1
CVE-2021-37803
An SQL Injection vulnerability exists in Sourcecodester Online Covid Vaccination...
High 8.1
CVE-2021-36621
Sourcecodester Online Covid Vaccination Scheduler System 1.0 is vulnerable to...
High 8.1

Affected Vendor

online covid vaccination scheduler system project

View all reports →

Affected Software

online covid vaccination scheduler system
Vulnerable Versions:
1.0

Timeline

Official Publish: August 3rd, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.