Lucene search

MitreCVE-2021-42665

HistoryNov 05, 2021 - 1:15 p.m.

CVE-2021-42665

2021-11-0513:15:08

CWE-89

mitre

web.nvd.nist.gov

sql injection

sourcecodester

engineers online portal

php

index.php

authentication bypass

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.9

Confidence

High

EPSS

0.018

Percentile

88.2%

JSON

An SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the login form inside of index.php, which can allow an attacker to bypass authentication.

Affected configurations

Nvd

Node

engineers_online_portal_projectengineers_online_portalMatch1.0

VendorProductVersionCPE
engineers_online_portal_projectengineers_online_portal1.0cpe:2.3:a:engineers_online_portal_project:engineers_online_portal:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
engineers_online_portal_project	engineers_online_portal	1.0	cpe:2.3:a:engineers_online_portal_project:engineers_online_portal:1.0:::::::*

References

github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-42665

github.com/TheHackingRabbi/CVE-2021-42665

www.exploit-db.com/exploits/50452

www.sourcecodester.com/php/13115/engineers-online-portal-php.html

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.9

Confidence

High

EPSS

0.018

Percentile

88.2%

JSON

Related for CVE-2021-42665