CVE-2021-45808

HighCVSS 8.8/10Last modified Jul 9, 2026

Description

jpress v4.2.0 allows users to register an account by default. With the account, user can upload arbitrary files to the server.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jan 19, 2022
Last modified
Jul 9, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-458099.8GlobalProtect-openconnect versions prior to 1.4.3 are affected by incorrect access control in GPService through DBUS, GUI Application. The wCVE-2021-458107.5GlobalProtect-openconnect versions prior to 2.0.0 (exclusive) are affected by incorrect access control in GPService through DBUS, GUI. The wCVE-2021-458116.5A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in osTicket 1.15.x allows authenticated attackers to execuCVE-2021-458126.1NUUO Network Video Recorder NVRsolo 3.9.1 is affected by a Cross Site Scripting (XSS) vulnerability. An attacker can steal the user's sessioCVE-2021-458136.1SLICAN WebCTI 1.01 2015 is affected by a Cross Site Scripting (XSS) vulnerability. The attacker can steal the user's session by injecting maCVE-2021-458149.8Nettmp NNT 5.1 is affected by a SQL injection vulnerability. An attacker can bypass authentication and access the panel with an administratiCVE-2021-458156.1Quectel UC20 UMTS/HSPA+ UC20 6.3.14 is affected by a Cross Site Scripting (XSS) vulnerability.CVE-2021-458186.1SAFARI Montage 8.7.32 is affected by a CRLF injection vulnerability which can lead to HTTP response splitting.CVE-2021-458197.8Wordline HIDCCEMonitorSVC before v5.2.4.3 contains an unquoted service path which allows attackers to escalate privileges to the system leveCVE-2021-458218.8A blind SQL injection vulnerability exists in Xbtit 3.1 via the sid parameter in ajaxchat/getHistoryChatData.php file that is accessible by CVE-2021-458226.1A cross-site scripting vulnerability is present in Xbtit 3.1. The stored XSS vulnerability occurs because /ajaxchat/sendChatData.php does noCVE-2021-458295.5HDF5 1.13.1-1 is affected by: segmentation fault, which causes a Denial of Service.
CVE-2021-45808: High severity, CVSS 8.8 | Vulnix