CVE-2021-42667

🗓️ 05 Nov 2021 12:26:06Reported by mitreType

cve🔗 web.nvd.nist.gov👁 84 Views🌐 WEB

SQL Injection vulnerability in Sourcecodester Online Event Booking and Reservation System in PHP. Allows data extraction and potential remote code execution

Reporter	Title	Published	Views	Family All 11
GithubExploit	Exploit for SQL Injection in Online_Event_Booking_And_Reservation_System_Project Online_Event_Booking_And_Reservation_System	3 Nov 202120:31	–	githubexploit
GithubExploit	Exploit for SQL Injection in Online_Event_Booking_And_Reservation_System_Project Online_Event_Booking_And_Reservation_System	3 Nov 202120:31	–	githubexploit
Circl	CVE-2021-42667	5 Nov 202115:27	–	circl
CNNVD	Engineers Online Portal SQL注入漏洞	5 Nov 202100:00	–	cnnvd
CNVD	Sourcecodester Online Event Booking and Reservation System SQL Injection Vulnerability	8 Nov 202100:00	–	cnvd
Check Point Advisories	Sourcecodester Online Event Booking and Reservation System SQL Injection (CVE-2021-42667)	15 Dec 202100:00	–	checkpoint_advisories
Cvelist	CVE-2021-42667	5 Nov 202112:26	–	cvelist
Nuclei	Online Event Booking and Reservation System 2.3.0 - SQL Injection	6 Jun 202603:01	–	nuclei
NVD	CVE-2021-42667	5 Nov 202113:15	–	nvd
OSV	CVE-2021-42667	5 Nov 202113:15	–	osv

NVD

Node

online_event_booking_and_reservation_system_project online_event_booking_and_reservation_systemMatch2.3.0

Source	Link
sourcecodester	www.sourcecodester.com/php/14241/online-event-booking-and-reservation-system-phpmysql.html
github	www.github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-42667
github	www.github.com/TheHackingRabbi/CVE-2021-42667

Parameter	Position	Path	Description	CWE
id	query param	event-management/views/?v=USER&ID=1	SQL Injection vulnerability in the USER page allowing manipulation of the SQL query via the id parameter	CWE-89

21 Nov 2024 06:27Current

9.8High risk

Vulners AI Score9.8

CVSS 27.5

CVSS 3.19.8

EPSS0.72266

CWE-89