CVE-2021-44653
CRITICALOretnom23 Online Magazine Management System - SQL Injection
Title source: ruleDescription
Online Magazine Management System 1.0 contains a SQL injection authentication bypass vulnerability. The Admin panel authentication can be bypassed due to SQL injection vulnerability in the login form allowing attacker to gain access as admin to the application.
Exploits (1)
exploitdb
WORKING POC
by Mohamed habib Smidi · textwebappsphp
https://www.exploit-db.com/exploits/50561
Scores
CVSS v3
9.8
EPSS
0.0027
EPSS Percentile
50.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-89
Status
published
Products (1)
oretnom23/online_magazine_management_system
1.0
Published
Dec 15, 2021
Tracked Since
Feb 18, 2026