by Kastro
Paper/Archive/CVE-2021-45334

CVE-2021-45334

mitre — Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection.

EPSS 3%CVSS 9.8
critical.is priorityof 100
47
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 86.3.863 × 2017.3No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection. An attacker can bypass admin authentication and gain access to admin panel using SQL Injection

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refpacketstormsecurity.com/files/165272/Online-Thesis-Archiving-System-1.0-SQL-Injection-Cross-Site-Scripting.htmlrefexploit-db.com/exploits/50597refgithub.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-45334refnu11secur1ty.com/2022/01/cve-2021-45334.html