CVE-2021-4462 – Apache Employee Records System File Upload Vulnerability

CVE ID : CVE-2021-4462

Published : Nov. 10, 2025, 11:15 p.m. | 15 minutes ago

Description : Employee Records System version 1.0 contains an unrestricted file upload vulnerability that allows a remote unauthenticated attacker to upload arbitrary files via the uploadID.php endpoint; uploaded files can be executed because the application does not perform proper server-side validation.

Severity: 9.3 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…