Lucene search

[email protected]CVE-2021-40578

HistoryDec 07, 2021 - 10:15 p.m.

CVE-2021-40578

2021-12-0722:15:06

CWE-89

[email protected]

web.nvd.nist.gov

cve-2021-40578

authenticated

blind sql injection

error-based

php

paypal

sensitive information leakage

arbitrary sql commands

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.0%

JSON

Authenticated Blind & Error-based SQL injection vulnerability was discovered in Online Enrollment Management System in PHP and PayPal Free Source Code 1.0, that allows attackers to obtain sensitive information and execute arbitrary SQL commands via IDNO parameter.

Affected configurations

NVD

Node

online_enrollment_management_system_projectonline_enrollment_management_systemMatch1.0

CPENameOperatorVersion
online_enrollment_management_system_project:online_enrollment_management_systemonline enrollment management system project online enrollment management systemeq1.0

CPE	Name	Operator	Version
online_enrollment_management_system_project:online_enrollment_management_system	online enrollment management system project online enrollment management system	eq	1.0

References

github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/janobe/Online-Enrollment-Management-System

medium.com/%40J03KR/cve-2021-40578-127ceaf3f1bb

www.nu11secur1ty.com/2021/12/online-enrollment-management-system-sql.html

Social References

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.0%

JSON

Related for CVE-2021-40578

cnvd1 cvelist1 nvd1 prion1