CVE-2021-41511

CRITICAL

9.8

Description

The username and password field of login in Lodging Reservation Management System V1 can give access to any user by using SQL injection to bypass authentication.

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published10/4/2021

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

lodging_reservation_management_system_project:lodging_reservation_management_system

Weaknesses (CWE)

CWE-89

References

http://packetstormsecurity.com/files/164366/Lodging-Reservation-Management-System-1.0-SQL-Injection.html(cve@mitre.org)

https://github.com/Ni7inSharma/CVE-2021-41511(cve@mitre.org)

https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41511(cve@mitre.org)

https://streamable.com/9fq8uw(cve@mitre.org)

https://www.exploit-db.com/exploits/50372(cve@mitre.org)

https://www.nu11secur1ty.com/2021/10/cve-2021-41511.html(cve@mitre.org)

https://www.sourcecodester.com/php/14883/lodging-reservation-management-system-php-free-source-code.html(cve@mitre.org)

http://packetstormsecurity.com/files/164366/Lodging-Reservation-Management-System-1.0-SQL-Injection.html(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/Ni7inSharma/CVE-2021-41511(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41511(af854a3a-2127-422b-91ae-364da2661108)

https://streamable.com/9fq8uw(af854a3a-2127-422b-91ae-364da2661108)

https://www.exploit-db.com/exploits/50372(af854a3a-2127-422b-91ae-364da2661108)

https://www.nu11secur1ty.com/2021/10/cve-2021-41511.html(af854a3a-2127-422b-91ae-364da2661108)

https://www.sourcecodester.com/php/14883/lodging-reservation-management-system-php-free-source-code.html(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.