CVE-2021-42668

2021-11-0512:34:23

mitre

www.cve.org

sql injection

sourcecodester engineers online portal

php

sensitive data

remote code execution

EPSS

0.013

Percentile

86.1%

JSON

A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter in the my_classmates.php web page… As a result, an attacker can extract sensitive data from the web server and in some cases can use this vulnerability in order to get a remote code execution on the remote web server.