CVE-2021-43130: SQL Injection
Published Nov 3, 2021
·Updated
An SQL Injection vulnerability exists in Sourcecodester Customer Relationship Management System (CRM) 1.0 via the username parameter in customer/login.php.
Affected Software
1 affected component
Customer Relationship Management System Project Customer Relationship Management System=1.0
Event History
Nov 3, 2021
CVE Published
via MITRE·02:52 PM
Data Sourced
via MITRE·02:52 PM
Description
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-43130?
CVE-2021-43130 is considered a high-severity vulnerability due to its SQL Injection nature.
2
How do I fix CVE-2021-43130?
To fix CVE-2021-43130, validate and sanitize user inputs in the username parameter in customer/login.php.
3
What software is affected by CVE-2021-43130?
CVE-2021-43130 affects SourceCodester Customer Relationship Management System version 1.0.
4
Can CVE-2021-43130 be exploited remotely?
Yes, CVE-2021-43130 can be exploited remotely since it targets a login page accessible over the internet.
5
What are the potential impacts of CVE-2021-43130?
Exploitation of CVE-2021-43130 could allow attackers to execute arbitrary SQL commands on the database.