CVE-2021-42668

Publicada em 05 nov 2021 · Atualizada em 04 ago 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 4.8%

A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter in the my_classmates.php web page.. As a result, an attacker can extract sensitive data from the web server and in some cases can use this vulnerability in order to get a remote code execution on the remote web server.

Produtos afetados

n/a · n/a

Referências

https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-42668 https://github.com/TheHackingRabbi/CVE-2021-42668 https://www.nu11secur1ty.com/2021/12/cve-2021-42668.html https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html