CVE-2021-42665

Sažetak

An SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the login form inside of index.php, which can allow an attacker to bypass authentication.

Reference

https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html
https://github.com/TheHackingRabbi/CVE-2021-42665
https://www.exploit-db.com/exploits/50452
https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-42665

CVSS

Base:	7.5
Impact:	6.4
Exploitability:	10.0

Pristup

Vektor	Složenost	Autentikacija
NETWORK	LOW	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
PARTIAL	PARTIAL	PARTIAL

CVSS vektor

AV:N/AC:L/Au:N/C:P/I:P/A:P

Zadnje važnije ažuriranje

23-11-2021 - 20:08

Objavljeno

05-11-2021 - 13:15