CVE-2021-25780

Published: Feb 17, 2021Modified: Jun 17, 2026

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: NVD

Description

An arbitrary file upload vulnerability has been identified in posts.php in Baby Care System 1.0. The vulnerability could be exploited by an remote attacker to upload content to the server, including PHP files, which could result in command execution and obtaining a shell.

Affected (1)

Products: Janobe: Baby Care System

1 product

Baby Care System

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Janobe Baby Care System	Version 1.0

Related CWEs

Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

References (2)

https://github.com/TCSWT/Baby-Care-System/blob/main/README.md

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/TCSWT/Baby-Care-System/blob/main/README.md

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.