CVE-2021-37221

Name of the Vulnerable Software and Affected Versions Sourcecodester Customer Relationship Management System version 1.0

Description A file upload issue exists via the account update option and customer create option, allowing a remote malicious user to upload an arbitrary php file.

Recommendations For Sourcecodester Customer Relationship Management System version 1.0, consider restricting access to the account update and customer create options until a fix is available. As a temporary workaround, restrict file uploads to only necessary file types to minimize the risk of exploitation.