What’s Vulnerable › Vulnerabilities

CVE-2021-25780

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-02-17 · updated 2026-06-17
• Weakness: CWE-434

Description

An arbitrary file upload vulnerability has been identified in posts.php in Baby Care System 1.0. The vulnerability could be exploited by an remote attacker to upload content to the server, including PHP files, which could result in command execution and obtaining a shell.

Affected products

• SourceCodester Baby Care System: 1.0

References

• https://github.com/TCSWT/Baby-Care-System/blob/main/README.md
• https://github.com/TCSWT/Baby-Care-System/blob/main/README.md

Get alerted when CVE-2021-25780 or the next vulnerability affects your stack