CVE-2021-44653 in Online Magazine Management System

Riassunto

di MITRE • 15/12/2021

Online Magazine Management System 1.0 contains a SQL injection authentication bypass vulnerability. The Admin panel authentication can be bypassed due to SQL injection vulnerability in the login form allowing attacker to gain access as admin to the application.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Prenotare: 06/12/2021
• Divulgazione: 15/12/2021
• Moderazione: accettato
• Voce: VDB-188311
• CPE: pronto
• CWE: CWE-89 (confermato)
• Sfruttamento: Scaricare
• CVSS: 6.3 (VulDB)
• EPSS: 0.05973
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-44653
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-44653
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-44653/