CVE-2021-40247: SQL Injection
Published Jan 21, 2022
·Updated
SQL injection vulnerability in Sourcecodester Budget and Expense Tracker System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username field.
Affected Software
2 affected components
Budget And Expense Tracker System Project Budget And Expense Tracker System=1.0
oretnom23 Budget and Expense Tracker System=1.0
Event History
Jan 21, 2022
CVE Published
via MITRE·06:58 PM
Data Sourced
via MITRE·06:58 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-40247?
CVE-2021-40247 has been classified as a high severity SQL injection vulnerability.
2
How do I fix CVE-2021-40247?
To fix CVE-2021-40247, implement proper input validation and use prepared statements to mitigate SQL injection risks.
3
What systems are affected by CVE-2021-40247?
CVE-2021-40247 affects version 1.0 of the Budget and Expense Tracker System by Oretnom23.
4
What type of attack can CVE-2021-40247 enable?
CVE-2021-40247 enables attackers to execute arbitrary SQL commands through the vulnerable username field.
5
Is there a patch available for CVE-2021-40247?
Currently, there is no official patch available for CVE-2021-40247, so users must apply manual remediation.