Vulnerability Description
Authenticated Blind & Error-based SQL injection vulnerability was discovered in Online Enrollment Management System in PHP and PayPal Free Source Code 1.0, that allows attackers to obtain sensitive information and execute arbitrary SQL commands via IDNO parameter.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Online Enrollment Management System Project | Online Enrollment Management System | 1.0 |
Related Weaknesses (CWE)
References
- https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/janobe/OnlineExploitThird Party Advisory
- https://medium.com/%40J03KR/cve-2021-40578-127ceaf3f1bb
- https://www.nu11secur1ty.com/2021/12/online-enrollment-management-system-sql.htmExploitThird Party Advisory
- https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/janobe/OnlineExploitThird Party Advisory
- https://medium.com/%40J03KR/cve-2021-40578-127ceaf3f1bb
- https://www.nu11secur1ty.com/2021/12/online-enrollment-management-system-sql.htmExploitThird Party Advisory
FAQ
What is CVE-2021-40578?
CVE-2021-40578 is a vulnerability with a CVSS score of 7.2 (HIGH). Authenticated Blind & Error-based SQL injection vulnerability was discovered in Online Enrollment Management System in PHP and PayPal Free Source Code 1.0, that allows attackers to obtain sensitive in...
How severe is CVE-2021-40578?
CVE-2021-40578 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-40578?
Check the references section above for vendor advisories and patch information. Affected products include: Online Enrollment Management System Project Online Enrollment Management System.