CVE-2021-47956: EgavilanMedia PHPCRUD 1.0 SQL Injection via firstname
EgavilanMedia PHPCRUD 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the firstname parameter. Attackers can send POST requests to insert.php with malicious firstname values to extract sensitive database information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47956?
CVE-2021-47956 has been rated as a high severity vulnerability due to its potential for SQL injection attacks that can lead to unauthorized data access.
How do I fix CVE-2021-47956?
To fix CVE-2021-47956, please validate and sanitize the inputs received from the 'firstname' parameter to prevent SQL injection.
Who is affected by CVE-2021-47956?
CVE-2021-47956 specifically affects EgavilanMedia PHPCRUD version 1.0.
What type of vulnerability is CVE-2021-47956?
CVE-2021-47956 is classified as an SQL injection vulnerability.
Can CVE-2021-47956 be exploited by unauthenticated users?
Yes, CVE-2021-47956 can be exploited by unauthenticated attackers to manipulate database queries.