CVE-2021-40907: SQL Injection
Published Jan 24, 2022
·Updated
SQL injection vulnerability in Sourcecodester Storage Unit Rental Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter to /storage/classes/Login.php.
Affected Software
1 affected component
Storage Unit Rental Management System Project Storage Unit Rental Management System=1.0
Event History
Jan 24, 2022
CVE Published
via MITRE·02:41 PM
Data Sourced
via MITRE·02:41 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-40907?
CVE-2021-40907 is classified as a high-severity SQL injection vulnerability.
2
How do I fix CVE-2021-40907?
To fix CVE-2021-40907, ensure proper input validation and use prepared statements to handle the username parameter.
3
What systems are affected by CVE-2021-40907?
CVE-2021-40907 affects the Storage Unit Rental Management System version 1.0 by oretnom23.
4
What kind of attack can be executed due to CVE-2021-40907?
CVE-2021-40907 allows attackers to execute arbitrary SQL commands, potentially compromising the database.
5
What are the potential impacts of exploiting CVE-2021-40907?
Exploiting CVE-2021-40907 could lead to unauthorized access to sensitive data, data manipulation, and database compromise.