CVE-2021-44966: SQL Injection
SQL injection bypass authentication vulnerability in PHPGURUKUL Employee Record Management System 1.2 via index.php. An attacker can log in as an admin account of this system and can destroy, change or manipulate all sensitive information on the system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-44966?
The severity of CVE-2021-44966 is critical with a CVSS score of 9.8.
How does CVE-2021-44966 affect the PHPGURUKUL Employee Record Management System?
CVE-2021-44966 allows an attacker to bypass authentication and log in as an admin account, giving them the ability to manipulate sensitive information on the system.
How can an attacker exploit CVE-2021-44966 in PHPGURUKUL Employee Record Management System?
An attacker can exploit CVE-2021-44966 by injecting malicious SQL queries in the index.php file of PHPGURUKUL Employee Record Management System 1.2.
What is the Common Weakness Enumeration (CWE) ID associated with CVE-2021-44966?
The Common Weakness Enumeration (CWE) ID associated with CVE-2021-44966 is CWE-89.
Is there a fix available for CVE-2021-44966?
Currently, there is no official fix available for CVE-2021-44966. It is recommended to apply security patches or updates provided by the vendor, if any.