Approved changes feed: RSS · Atom

cpe:2.3:a:tad:tadtools:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTad (9f07c2bb-05d4-5fd6-8ef9-6f5140f783c7)
ProductTadtools (65521b7d-7f9a-5c4f-9a97-90f85bf6bf07)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-41975 vulnerable 2026-06-08 05:35:21.274719 Tad TadTools - Improper Authorization
HIGH (7.5)
TadTools special page is vulnerable to authorization bypass, thus remote attackers can use the specific parameter to delete arbitrary files in the system without logging in.
Published: 2021-10-08T15:15:42.544Z
Updated: 2024-09-16T20:46:46.234Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41566 vulnerable 2026-06-08 05:35:20.744266 Tad TadTools - Arbitrary File Upload
CRITICAL (9.8)
The file extension of the TadTools file upload function fails to filter, thus remote attackers can upload any types of files and execute arbitrary code without logging in.
Published: 2021-10-08T15:15:36.568Z
Updated: 2024-09-17T03:33:55.956Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41565 vulnerable 2026-06-08 05:35:20.743144 Tad TadTools - Reflected XSS
MEDIUM (6.1)
TadTools special page parameter does not properly restrict the input of specific characters, thus remote attackers can inject JavaScript syntax without logging in, and further perform reflective XSS attacks.
Published: 2021-10-08T15:15:35.097Z
Updated: 2024-09-16T16:13:39.371Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.