CVE-2021-42666

2021-11-0512:24:09

mitre

www.cve.org

sql injection

sourcecodester engineers

php

quiz_question.php

sensitive data

remote code execution

EPSS

0.038

Percentile

91.9%

JSON

A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter to quiz_question.php, which could let a malicious user extract sensitive data from the web server and in some cases use this vulnerability in order to get a remote code execution on the remote web server.