Vulnerability Description
Phone Shop Sales Managements System using PHP with Source Code 1.0 is vulnerable to authentication bypass which leads to account takeover of the admin.
CVSS Score
9.8
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Phone Shop Sales Management System Project | Phone Shop Sales Management System | 1.0 |
Related Weaknesses (CWE)
References
- https://pratikkhalane91.medium.com/cve-2021-35559-bb62022dd08aExploitThird Party Advisory
- https://www.sourcecodester.com/Product
- https://pratikkhalane91.medium.com/cve-2021-35559-bb62022dd08aExploitThird Party Advisory
- https://www.sourcecodester.com/Product
FAQ
What is CVE-2021-36560?
CVE-2021-36560 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Phone Shop Sales Managements System using PHP with Source Code 1.0 is vulnerable to authentication bypass which leads to account takeover of the admin.
How severe is CVE-2021-36560?
CVE-2021-36560 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2021-36560?
Check the references section above for vendor advisories and patch information. Affected products include: Phone Shop Sales Management System Project Phone Shop Sales Management System.