What’s Vulnerable › Vulnerabilities

CVE-2021-41646

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 7.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-10-29 · updated 2026-06-17
• Weakness: CWE-434

Description

Remote Code Execution (RCE) vulnerability exists in Sourcecodester Online Reviewer System 1.0 by uploading a maliciously crafted PHP file that bypasses the image upload filters..

Affected products

• SourceCodester Online Reviewer System: 1.0

References

• https://www.exploit-db.com/exploits/50319
• https://www.nu11secur1ty.com/2021/12/cve-2021-41646.html
• https://www.exploit-db.com/exploits/50319
• https://www.nu11secur1ty.com/2021/12/cve-2021-41646.html

Get alerted when CVE-2021-41646 or the next vulnerability affects your stack