CVE-2021-43510

CRITICALNuclei

Sourcecodester Simple Client Management System 1.0 - SQL Injection

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2021-43510 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the username field in login.php.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Nuclei templates

1
ProjectDiscoveryCRITICALSourcecodester Simple Client Management System 1.0 - SQL InjectionCVSS 9.8

Sourcecodester Simple Client Management System 1.0 contains a SQL injection vulnerability via the username field in login.php. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

Impact

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data leakage, or data manipulation.

Remediation

Apply the latest patch or update provided by the vendor to fix the SQL Injection vulnerability in the Sourcecodester Simple Client Management System 1.0.

WeaknessesCWE-89
Authorsedoardottt
Template tagscve2021cvesimpleclientmanagementsqliauth-bypasssimple_client_management_system_projectvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:simple_client_management_system_project:simple_client_management_system:1.0:*:*:*:*:*:*:*
https://github.com/r4hn1/Simple-Client-Management-System-Exploit/blob/main/CVE-2021-43510 https://www.sourcecodester.com/php/15027/simple-client-management-system-php-source-code.html https://nvd.nist.gov/vuln/detail/CVE-2021-43510 https://github.com/ARPSyndicate/kenzer-templates https://github.com/r4hn1/Simple-Client-Management-System-Exploit

Source: ProjectDiscovery

References

3