CVEブラウザに戻る

CVE-2021-36624

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1420%

EPSS Percentile29.08th

Published2021年7月30日

Last Modified2024年11月21日

Vulnerability Description

Sourcecodester Phone Shop Sales Managements System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Affected Platforms (CPE)

📦

Phone Shop Sales Management System Project

Phone Shop Sales Management System

= 1.0

References & Advisories

🔗 https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-36624

🔗 https://www.exploit-db.com/exploits/50105

🔗 https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-36624

🔗 https://www.exploit-db.com/exploits/50105

関連する脆弱性情報

CVE-2021-366239.8

Arbitrary File Upload in Sourcecodester Phone Shop Sales Management System 1.0 enables RCE.

CVE-2021-365609.8

Phone Shop Sales Managements System using PHP with Source Code 1.0 is vulnerable to authentication bypass which leads to account t...

CVE-2021-353374.3

Sourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct Object Reference (IDOR). Any attacker will...

CVE-2021-4422810.0

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration...