github.com
https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-38833 CVE-2021-38833
CRITICAL
Apartment Visitor Management System (AVMS) 1.0 - 'username' SQL Injection
Record summary
CVE-2021-38833 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit.
Description
SQL injection vulnerability in PHPGurukul Apartment Visitors Management System (AVMS) v. 1.0 allows attackers to execute arbitrary SQL statements and to gain RCE.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBApartment Visitor Management System (AVMS) 1.0 - 'username' SQL InjectionExploitDB exploitby mari0x00Not analyzed1 file
References
5nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2021-38833 phpgurukul.com
https://phpgurukul.com/apartment-visitors-management-system-using-php-and-mysql streamable.com
https://streamable.com/ojobew exploit-db.com
https://www.exploit-db.com/exploits/50288