CVE:CVE-2021-41645
CNNVD:CNNVD-202110-2169
Sourcecodester Budget And Expense Tracker System是Carlo Montero个人开发者的一个基于 Web 的应用程序。用于管理您的个人/小型企业预算和开支。
Sourcecodester Budget and Expense Tracker System 存在安全漏洞，该漏洞源于 Sourcecodester Budget and Expense Tracker System 1.0中存在远程代码执行（RCE）漏洞，允许远程恶意用户通过图片上传字段注入任意代码。
solution:Upgrade budget_and_expense_tracker_system_project budget_and_expense_tracker_system to a higher version than 1.0,and avoid the version 1.0