返回 CVE 瀏覽器

CVE-2021-42668

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1050%

EPSS Percentile32.15th

Published2021年11月5日

Last Modified2024年11月21日

Vulnerability Description

A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter in the my_classmates.php web page.. As a result, an attacker can extract sensitive data from the web server and in some cases can use this vulnerability in order to get a remote code execution on the remote web server.

Affected Platforms (CPE)

📦

Engineers Online Portal Project

Engineers Online Portal

All versions

References & Advisories

🔗 https://github.com/TheHackingRabbi/CVE-2021-42668

🔗 https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-42668

🔗 https://www.nu11secur1ty.com/2021/12/cve-2021-42668.html

🔗 https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html

🔗 https://github.com/TheHackingRabbi/CVE-2021-42668

🔗 https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-42668

🔗 https://www.nu11secur1ty.com/2021/12/cve-2021-42668.html

🔗 https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html

相關漏洞威脅

CVE-2021-426699.8

A file upload vulnerability exists in Sourcecodester Engineers Online Portal in PHP via dashboard_teacher.php, which allows changi...

CVE-2021-426659.8

An SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the login form inside of index.php, whi...

CVE-2021-426709.8

A SQL injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter to the announcements_st...

CVE-2021-434378.8

In sourcecodetester Engineers Online Portal as of 10-21-21, an attacker can manipulate the Host header as seen by the web applicat...