CVE-2021-44280

CRITICAL

attendance management system 1.0 - SQL Injection via makeSafe Function

Title source: llm
STIX 2.1

Description

attendance management system 1.0 is affected by a SQL injection vulnerability in admin/incFunctions.php through the makeSafe function.

References (4)

Core 4
Core References
Exploit, Issue Tracking, Third Party Advisory x_refsource_misc
https://www.sourcecodester.com/php/14173/attendance-management-system.html#comment-96757
Exploit, Third Party Advisory x_refsource_misc
https://www.nu11secur1ty.com/2021/12/cve-2021-44280.html
Exploit, Third Party Advisory x_refsource_misc
https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44280

Scores

CVSS v3 9.8
EPSS 0.0191
EPSS Percentile 77.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-89
Status published
Products (1)
attendance_management_system_project/attendance_management_system 1.0
Published Dec 01, 2021
Tracked Since Feb 18, 2026