Paper/Archive/CVE-2021-41511

CVE-2021-41511

mitre — The username and password field of login in Lodging Reservation Management System V1 can give access to any user by using SQL injection t…

EPSS 3%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 88.7.887 × 2017.7 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

The username and password field of login in Lodging Reservation Management System V1 can give access to any user by using SQL injection to bypass authentication.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refsourcecodester.com/php/14883/lodging-reservation-management-system-php-free-source-code.html refgithub.com/Ni7inSharma/CVE-2021-41511 refexploit-db.com/exploits/50372 refpacketstormsecurity.com/files/164366/Lodging-Reservation-Management-System-1.0-SQL-Injection.html refgithub.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41511 refstreamable.com/9fq8uw refnu11secur1ty.com/2021/10/cve-2021-41511.html