CVE-2021-36624 - Sourcecodester Phone Shop Sales Managements System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass

Back Back to CVE browser

CRITICAL

Sourcecodester Phone Shop Sales Managements System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass

Published Jul 29, 2021

9.8

CRITICAL

CVSS 3.1

EPSS 3.41%

Description

Sourcecodester Phone Shop Sales Managements System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-23221
Advisory
https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-36624
x_refsource_MISCExploitThird Party Advisory
https://www.exploit-db.com/exploits/50105
x_refsource_MISCExploitThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-23221		Advisory
https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-36624		x_refsource_MISCExploitThird Party Advisory
https://www.exploit-db.com/exploits/50105		x_refsource_MISCExploitThird Party AdvisoryVDB Entry