CVE-2021-41675: E-Negosyo System Project E-Negosyo System

High severity, CVSS 7.2. EPSS: 3.1% chance of exploitation in the next 30 days.

A Remote Code Execution (RCE) vulnerabilty exists in Sourcecodester E-Negosyo System 1.0 in /admin/produts/controller.php via the doInsert function, which validates images with getImageSizei. .

Affected products

• E-Negosyo System Project E-Negosyo System: version 1.0 only

Published 2021-10-29. Last modified 2026-06-17.