CVE-2021-36560

CRITICAL

9.8

Description

Phone Shop Sales Managements System using PHP with Source Code 1.0 is vulnerable to authentication bypass which leads to account takeover of the admin.

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published11/2/2021

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

phone_shop_sales_management_system_project:phone_shop_sales_management_system

Weaknesses (CWE)

CWE-425

References

https://pratikkhalane91.medium.com/cve-2021-35559-bb62022dd08a(cve@mitre.org)

https://www.sourcecodester.com/(cve@mitre.org)

https://pratikkhalane91.medium.com/cve-2021-35559-bb62022dd08a(af854a3a-2127-422b-91ae-364da2661108)

https://www.sourcecodester.com/(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.