Back to CVE Browser

CVE-2021-36624

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1420%

EPSS Percentile29.08th

PublishedJul 30, 2021

Last ModifiedNov 21, 2024

Vulnerability Description

Sourcecodester Phone Shop Sales Managements System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Affected Platforms (CPE)

📦

Phone Shop Sales Management System Project

Phone Shop Sales Management System

= 1.0

References & Advisories

🔗 https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-36624

🔗 https://www.exploit-db.com/exploits/50105

🔗 https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-36624

🔗 https://www.exploit-db.com/exploits/50105

Related Vulnerabilities

CVE-2021-366239.8

Arbitrary File Upload in Sourcecodester Phone Shop Sales Management System 1.0 enables RCE.

CVE-2021-365609.8

Phone Shop Sales Managements System using PHP with Source Code 1.0 is vulnerable to authentication bypass which leads to account t...

CVE-2021-353374.3

Sourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct Object Reference (IDOR). Any attacker will...

CVE-2021-4155610.0

sqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 allows an out-of-bounds read (in the core interpreter) that can lead to ...