CVE-2021-44966 — SQL Injection in Employee Record Management System

CWE-89 — SQL Injection3 documents3 sources
Severity
9.8CRITICALNVD
EPSS
0.1%
top 68.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Phpgurukul Employee Record Management System
Timeline
PublishedDec 13
Latest updateDec 14

Description

SQL injection bypass authentication vulnerability in PHPGURUKUL Employee Record Management System 1.2 via index.php. An attacker can log in as an admin account of this system and can destroy, change or manipulate all sensitive information on the system.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-j4qj-cw7h-263q: SQL injection bypass authentication vulnerability in PHPGURUKUL Employee Record Management System 1↗2021-12-14
â–¶
CVEList
CVE-2021-44966: SQL injection bypass authentication vulnerability in PHPGURUKUL Employee Record Management System 1↗2021-12-13
â–¶
CVE-2021-44966 — SQL Injection | cvebase