2 matches found
CVE-2021-41647
Online-Food-Ordering-Web-App 1.0 by Kaushik Jadhav is affected by an unauthenticated error-based and time-based blind SQL injection in the login.php username parameter. Exploitation allows retrieval of sensitive DB data and the addition of an administrative user. Documented PoCs and payloads (inc...