CVE-2021-47819 — ProjeQtOr Project Management 9.1.4 - Remote Code Execution

CVE-2021-47819

ProjeQtOr Project Management 9.1.4 - Remote Code Execution PUBLISHED

Description (CNA)

ProjeQtOr Project Management 9.1.4 contains a file upload vulnerability that allows guest users to upload malicious PHP files with arbitrary code execution capabilities. Attackers can upload a PHP script through the profile attachment section and execute system commands by accessing the uploaded file with a specially crafted request parameter.

Affected (CNA)

Vendor / product	Versions
Projeqtor / ProjeQtOr Project Management	affected 9.1.4

CWE

CWE-434

References

https://www.exploit-db.com/exploits/49919
https://www.projeqtor.org

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.