CVE-2021-42665

An SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the login form inside of index.php, which can allow an attacker to bypass authentication.

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

4.95% chance of exploitation in the next 30 days, 92nd percentile

Published

2021-11-05

Updated

2024-08-04

Proof-of-concept exploits (4)

• TheHackingRabbi/CVE-2021-426650★ · 2022-03-24
• nu11secur1ty/CVE-mitre/tree/main/CVE-2021-42665189★ · 2026-10-07
• https://www.exploit-db.com/exploits/50452
• 0xDeku/CVE-2021-426650★ · 2022-03-24

Security advisories

• https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html

References

• CVE Record
• NVD entry

Related

• CVE-2021-42662
• CVE-2021-42663
• CVE-2021-42664
• CVE-2021-42666
• CVE-2021-42667
• CVE-2021-42668