Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2021-38753

EPSS 0.52% · P67
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2021-38753

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An unrestricted file upload on Simple Image Gallery Web App can be exploited to upload a web shell and executed to gain unauthorized access to the server hosting the web app.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Simple Image Gallery Web App 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Simple Image Gallery Web App是一个基于 Web 的应用程序,可以由多个用户管理。用户可以将他们的图像存储在此 Web 应用程序中。 Simple Image Gallery Web App 存在代码问题漏洞,该漏洞源于 Simple Image Gallery Web App 的无限制文件上传来上传 Web shell 并执行。利用该漏洞可以未经授权访问托管 Web 应用程序的服务器。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2021-38753

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2021-38753

登录查看更多情报信息。

Same Patch Batch · n/a · 2021-08-16 · 39 CVEs total

CVE-2021-234227.8 HIGHArbitrary Code Injection
CVE-2021-234235.5 MEDIUMDirectory Traversal
CVE-2021-35394Realtek Jungle SDK 安全漏洞
CVE-2021-38757Hospital Management System 跨站脚本漏洞
CVE-2021-38756Hospital Management System 跨站脚本漏洞
CVE-2021-38755Hospital Management System 安全漏洞
CVE-2021-38754HealthNode Hospital Management System SQL注入漏洞
CVE-2021-38752Online-Catering-Reservation 跨站脚本漏洞
CVE-2021-38751ExponentCMS安全漏洞
CVE-2021-38607Crocoblock JetEngine 跨站脚本漏洞
CVE-2021-35392Realtek Jungle SDK 缓冲区错误漏洞
CVE-2021-35393Realtek Jungle SDK 缓冲区错误漏洞
CVE-2021-38758Online Catering Reservation System 输入验证错误漏洞
CVE-2021-35395Realtek Jungle SDK 安全漏洞
CVE-2021-38712OneNav 安全漏洞
CVE-2021-38713imgurl跨站脚本漏洞
CVE-2021-38711gitit 安全漏洞
CVE-2021-38708Ocproducts Composr CMS 跨站脚本漏洞
CVE-2021-38709Ocproducts Composr CMS 跨站脚本漏洞
CVE-2021-22933Pulse Secure Pulse Connect Secure 路径遍历漏洞

Showing top 20 of 39 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2021-38753

No comments yet


Leave a comment