CVEvulnerability
CVE-2021-41647
9.1 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2021-10-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-89
Description
An un-authenticated error-based and time-based blind SQL injection vulnerability exists in Kaushik Jadhav Online Food Ordering Web App 1.0. An attacker can exploit the vulnerable "username" parameter in login.php and retrieve sensitive database information, as well as add an administrative user.
Affected configurations
• online food ordering web app project online food ordering web app 1.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://packetstormsecurity.com/files/164422/Online-Food-Ordering-Web-App-SQL-Injection.html Exploit, Third Party Advisory
- https://github.com/MobiusBinary/CVE-2021-41647 Exploit, Third Party Advisory
- https://github.com/kaushikjadhav01/Online-Food-Ordering-Web-App Product, Third Party Advisory
- https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41647 Exploit, Third Party Advisory
- http://packetstormsecurity.com/files/164422/Online-Food-Ordering-Web-App-SQL-Injection.html Exploit, Third Party Advisory
- https://github.com/MobiusBinary/CVE-2021-41647 Exploit, Third Party Advisory
- https://github.com/kaushikjadhav01/Online-Food-Ordering-Web-App Product, Third Party Advisory
- https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41647 Exploit, Third Party Advisory