CVE-2021-33925

SQL Injection vulnerability in nitinparashar30 cms-corephp through commit bdabe52ef282846823bda102728a35506d0ec8f9 (May 19, 2021) allows unauthenticated attackers to gain escilated privledges via a crafted login.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.97% chance of exploitation in the next 30 days, 60th percentile

Published

2023-02-15

Updated

2025-03-20

Proof-of-concept exploits (1)

• nitinp1232/cms-corephp/issues/1

References

• CVE Record
• NVD entry

Related

• CVE-2021-33910
• CVE-2021-33928
• CVE-2021-33909
• CVE-2021-33929
• CVE-2021-33904
• CVE-2021-33930