2 matches found
CVE-2021-41647
Online-Food-Ordering-Web-App 1.0 by Kaushik Jadhav is affected by an unauthenticated error-based and time-based blind SQL injection in the login.php username parameter. Exploitation allows retrieval of sensitive DB data and the addition of an administrative user. Documented PoCs and payloads (inc...
9.1CVSS9.5AI score0.02008EPSS
SaveExploits4References4Affected Software1
20