Lucene search

MitreCVE-2021-44966

HistoryDec 13, 2021 - 3:15 p.m.

CVE-2021-44966

2021-12-1315:15:08

CWE-89

mitre

web.nvd.nist.gov

cve-2021-44966

sql injection

bypass authentication

phpgurukul

employee record management system

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

58.5%

JSON

SQL injection bypass authentication vulnerability in PHPGURUKUL Employee Record Management System 1.2 via index.php. An attacker can log in as an admin account of this system and can destroy, change or manipulate all sensitive information on the system.

Affected configurations

Nvd

Node

phpgurukulemployee_record_management_systemMatch1.2

VendorProductVersionCPE
phpgurukulemployee_record_management_system1.2cpe:2.3:a:phpgurukul:employee_record_management_system:1.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
phpgurukul	employee_record_management_system	1.2	cpe:2.3:a:phpgurukul:employee_record_management_system:1.2:::::::*

References

github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/PHPGURUKUL/ANUJ%20KUMAR/Employee-Record-Management-System-SQL-Injection-Bypass-Authentication

Social References

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

58.5%

JSON

Related for CVE-2021-44966