CVE-2021-3164

February 2, 2021

ChurchRota 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permission in order to upload and execute an arbitrary file via a POST request to resources.php.

Summary:

ChurchRota 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permission in order to upload and execute an arbitrary file via a POST request to resources.php.

Reference Links(if available):

  • https://github.com/Little-Ben/ChurchRota
  • https://github.com/rmccarth/cve-2021-3164

  • CVSS Score (if available)

    v2: / MEDIUM

    v3: /

    Links to Exploits(if available)

  • Tags: , , , ,

    You may have missed

    image

    [LOCKBIT3] – Ransomware Victim: 9fsfalcons[.]org

    December 23, 2024
    image

    [HUNTERS] – Ransomware Victim: SmartLynx Airlines SIA

    December 23, 2024
    image

    [APT73] – Ransomware Victim: linebank[.]co[.]id

    December 23, 2024
    image

    [CACTUS] – Ransomware Victim: galatachemicals[.]com

    December 23, 2024
    image

    [FUNKSEC] – Ransomware Victim: kfar-yona[.]muni[.]il

    December 23, 2024