CVE-2021-41675

Name of the Vulnerable Software and Affected Versions Sourcecodester E-Negosyo System version 1.0

Description A Remote Code Execution (RCE) issue exists in the system, specifically in the /admin/produts/controller.php file via the doInsert function. This function validates images using getImageSize.

Recommendations For Sourcecodester E-Negosyo System version 1.0, consider disabling the doInsert function in the /admin/produts/controller.php file as a temporary workaround until a patch is available. Restrict access to the vulnerable controller.php file to minimize the risk of exploitation. Avoid using the getImageSize function for image validation in the affected API endpoint until the issue is resolved.