CVE-2021-44966

2021-12-1314:20:43

mitre

www.cve.org

sql injection

authentication vulnerability

phpgurukul employee record management system 1.2

index.php

admin account

sensitive information

AI Score

Confidence

High

EPSS

0.002

Percentile

58.5%

JSON

SQL injection bypass authentication vulnerability in PHPGURUKUL Employee Record Management System 1.2 via index.php. An attacker can log in as an admin account of this system and can destroy, change or manipulate all sensitive information on the system.

References

github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/PHPGURUKUL/ANUJ%20KUMAR/Employee-Record-Management-System-SQL-Injection-Bypass-Authentication