CVE-2021-41433

CRITICAL

9.8

Description

SQL Injection vulnerability exists in version 1.0 of the Resumes Management and Job Application Website application login form by EGavilan Media that allows authentication bypass through login.php.

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published9/27/2022

Last Modified5/21/2025

Sourcenvd

Honeypot Sightings0

Affected Products

resumes_management_and_job_application_website_application_project:resumes_management_and_job_application_website_application

Weaknesses (CWE)

CWE-89CWE-89

References

https://github.com/martinkubecka/CVE-References/blob/main/CVE-2021-41433.md(cve@mitre.org)

https://github.com/martinkubecka/CVE-References/blob/main/Untitled-SQLi.md(cve@mitre.org)

https://github.com/martinkubecka/CVE-References/blob/main/CVE-2021-41433.md(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/martinkubecka/CVE-References/blob/main/Untitled-SQLi.md(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.