CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It may be remotely exploitable.
CVE
CVE-2021-29377
Severity
CRITICAL
CVSS
9.8
EPSS
1.60%
Original NVD Description
Pear Admin Think through 2.1.2 has an arbitrary file upload vulnerability that allows attackers to execute arbitrary code remotely. A .php file can be uploaded via admin.php/index/upload because app/common/service/UploadService.php mishandles fileExt.
Related CVEs
Other vulnerabilities affecting the same vendor(s)