CVE-2021-40578

2021-12-0721:13:44

mitre

www.cve.org

sql injection

enrollment system

php

paypal

idno parameter

sensitive information

AI Score

7.8

Confidence

High

EPSS

0.002

Percentile

51.9%

JSON

Authenticated Blind & Error-based SQL injection vulnerability was discovered in Online Enrollment Management System in PHP and PayPal Free Source Code 1.0, that allows attackers to obtain sensitive information and execute arbitrary SQL commands via IDNO parameter.