CVE-2021-37807: SQL Injection
First published: Wed Oct 27 2021(Updated: )
An SQL Injection vulneraility exists in https://phpgurukul.com Online Shopping Portal 3.1 via the email parameter on the /check_availability.php endpoint that serves as a checker whether a new user's email is already exist within the database.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Online Shopping Portal Project Online Shopping Portal | =3.1 | |
| PHPGurukul Online Shopping Portal | =3.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this SQL Injection vulnerability?
The vulnerability ID for this SQL Injection vulnerability is CVE-2021-37807.
Where does the SQL Injection vulnerability exist?
The SQL Injection vulnerability exists in the email parameter on the /check_availability.php endpoint of the Online Shopping Portal 3.1.
How can an attacker exploit this SQL Injection vulnerability?
An attacker can exploit this SQL Injection vulnerability by injecting malicious SQL code into the email parameter to manipulate the database queries.
What is the severity of CVE-2021-37807?
The severity of CVE-2021-37807 is high, with a CVSS score of 7.5.
Is there a fix available for this SQL Injection vulnerability?
No specific fix information is provided in the vulnerability report. It is recommended to update to a patched version or apply security measures to mitigate the risk.
- collector/nvd-index
- collector/nvd-api
- agent/severity
- agent/weakness
- agent/author
- agent/type
- agent/event
- agent/references
- agent/description
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/online shopping portal project
- canonical/online shopping portal project online shopping portal
- version/online shopping portal project online shopping portal/3.1
- vendor/phpgurukul
- canonical/phpgurukul online shopping portal
- version/phpgurukul online shopping portal/3.1