CVEvulnerability
CVE-2021-40578
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-12-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Authenticated Blind & Error-based SQL injection vulnerability was discovered in Online Enrollment Management System in PHP and PayPal Free Source Code 1.0, that allows attackers to obtain sensitive information and execute arbitrary SQL commands via IDNO parameter.
Affected configurations
• online enrollment management system project online enrollment management system 1.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/janobe/Online-Enrollment-Management-System Exploit, Third Party Advisory
- https://medium.com/%40J03KR/cve-2021-40578-127ceaf3f1bb medium.com
- https://www.nu11secur1ty.com/2021/12/online-enrollment-management-system-sql.html Exploit, Third Party Advisory
- https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/janobe/Online-Enrollment-Management-System Exploit, Third Party Advisory
- https://medium.com/%40J03KR/cve-2021-40578-127ceaf3f1bb medium.com
- https://www.nu11secur1ty.com/2021/12/online-enrollment-management-system-sql.html Exploit, Third Party Advisory