CVE-2021-37770

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Nucleus CMS v3.71 is affected by a file upload vulnerability. In this vulnerability, we can use upload to change the upload path to the path without the Htaccess file. Upload an Htaccess file and write it to AddType application / x-httpd-php.jpg. In this way, an attacker can upload a picture with shell, treat it as PHP, execute commands, so as to take down website resources.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

No affected versions have been published.

Timeline

Published: Jun 30, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-377748.0An issue was discovered in function httpProcDataSrv in TL-WDR7660 2.0.30 that allows attackers to execute arbitrary code.CVE-2021-377777.5Gila CMS 2.2.0 is vulnerable to Insecure Direct Object Reference (IDOR). Thumbnails uploaded by one site owner are visible by another site o CVE-2021-377789.8There is a buffer overflow in gps-sdr-sim v1.0 when parsing long command line parameters, which can lead to DoS or code execution.CVE-2021-37787.8vim is vulnerable to Heap-based Buffer Overflow CVE-2021-377815.4Employee Record Management System v 1.2 is vulnerable to Cross Site Scripting (XSS) via editempprofile.php.CVE-2021-377829.8Employee Record Management System v 1.2 is vulnerable to SQL Injection via editempprofile.php.CVE-2021-377864.6Certain Federal Office of Information Technology Systems and Telecommunication FOITT products are affected by improper handling of exception CVE-2021-377876.5The unprivileged administrative interface in ABO.CMS version 5.8 through v.5.9.3 is affected by a SQL Injection vulnerability via a HTTP POS CVE-2021-377885.4A vulnerability in the web UI of Gurock TestRail v5.3.0.3603 could allow an unauthenticated, remote attacker to affect the integrity of a de CVE-2021-377898.1stb_image.h 2.27 has a heap-based buffer over in stbi__jpeg_load, leading to Information Disclosure or Denial of Service.CVE-2021-37796.5A malicious MySQL server can request local file content from a client using ruby-mysql prior to version 2.10.0 without explicit authorizatio CVE-2021-377914.9MyAdmin v1.0 is affected by an incorrect access control vulnerability in viewing personal center in /api/user/userData?userCode=admin.