vendor:
Employee Record System
by:
Saeed Bala Ahmed (r0b0tG4nG)
9.8
CVSS
HIGH
Unrestricted File Upload
434
CWE
Product Name: Employee Record System
Affected Version From: Version 1
Affected Version To: Version 1
Patch Exists: NO
Related CWE: N/A
CPE: a:sourcecodester:employee_record_system:1.0
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: Parrot OS
2021
Employee Record System 1.0 – Unrestricted File Upload to Remote Code Execution
An unrestricted file upload vulnerability in Employee Record System 1.0 allows an attacker to upload a malicious file, such as a webshell, to the server. This can be exploited to execute arbitrary code on the server, leading to remote code execution. The vulnerability exists in the 'Add Employee' page, where an attacker can upload a malicious file in the 'Upload Employee Photo' and 'Upload Employee ID' fields. The malicious file is then accessible via a direct URL, allowing an attacker to execute arbitrary code on the server.
Mitigation:
Input validation should be used to restrict the types of files that can be uploaded. Additionally, the application should be configured to only allow the upload of files with specific extensions, such as .jpg, .png, etc.
