CVE-2021-42665

CRITICAL

Engineers Online Portal - SQL Injection via Login Form

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 3 public exploits for CVE-2021-42665. PoCs published by Alon Leviev, 0xDeku.

AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in the Engineers Online Portal 1.0 login form, allowing authentication bypass via a crafted payload in the username or password field.

Description

An SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the login form inside of index.php, which can allow an attacker to bypass authentication.

Exploits (3)

exploitdb WORKING POC
by Alon Leviev · textwebappsphp
https://www.exploit-db.com/exploits/50452

This exploit demonstrates an SQL injection vulnerability in the Engineers Online Portal 1.0 login form, allowing authentication bypass via a crafted payload in the username or password field.

Classification
Working Poc 100%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: Engineers Online Portal 1.0
No auth needed
Prerequisites: Access to the login page of the vulnerable application
devstral-2 · analyzed Feb 16, 2026 Full analysis →
nomisec WORKING POC
by 0xDeku · poc
https://github.com/0xDeku/CVE-2021-42665

This repository provides a proof-of-concept for CVE-2021-42665, an SQL injection vulnerability in the Engineers Online Portal login form. The exploit allows authentication bypass by injecting a payload into the username or password field.

Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: Engineers Online Portal system
No auth needed
Prerequisites: Access to the login page of the Engineers Online Portal system
devstral-2 · analyzed Feb 16, 2026 Full analysis →
inthewild WRITEUP
poc
https://github.com/thehackingrabbi/cve-2021-42665

This repository provides a technical description and proof-of-concept payload for an SQL injection vulnerability in the Engineers Online Portal login form, allowing authentication bypass. It includes references to external sources and a demonstration of the exploit.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: Engineers Online Portal system (login.php)
No auth needed
Prerequisites: Access to the login page
devstral-2 · analyzed Feb 23, 2026 Full analysis →

References (4)

Core 4
Core References
Product, Third Party Advisory x_refsource_misc
https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html
Exploit, Third Party Advisory x_refsource_misc
https://github.com/TheHackingRabbi/CVE-2021-42665
Exploit, Third Party Advisory, VDB Entry x_refsource_misc
https://www.exploit-db.com/exploits/50452
Exploit, Third Party Advisory x_refsource_misc
https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-42665

Scores

CVSS v3 9.8
EPSS 0.2485
EPSS Percentile 96.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-89
Status published
Products (1)
engineers_online_portal_project/engineers_online_portal 1.0
Published Nov 05, 2021
Tracked Since Feb 18, 2026