CVE-2021-38833

Sažetak

SQL injection vulnerability in PHPGurukul Apartment Visitors Management System (AVMS) v. 1.0 allows attackers to execute arbitrary SQL statements and to gain RCE.

Reference

https://phpgurukul.com/apartment-visitors-management-system-using-php-and-mysql/
https://www.exploit-db.com/exploits/50288
https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-38833
https://streamable.com/ojobew

CVSS

Base:	7.5
Impact:	6.4
Exploitability:	10.0

Pristup

Vektor	Složenost	Autentikacija
NETWORK	LOW	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
PARTIAL	PARTIAL	PARTIAL

CVSS vektor

AV:N/AC:L/Au:N/C:P/I:P/A:P

Zadnje važnije ažuriranje

05-11-2021 - 18:09

Objavljeno

13-09-2021 - 19:15