CVEvulnerability
CVE-2021-44653
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2021-12-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Online Magazine Management System 1.0 contains a SQL injection authentication bypass vulnerability. The Admin panel authentication can be bypassed due to SQL injection vulnerability in the login form allowing attacker to gain access as admin to the application.
Affected configurations
• oretnom23 online magazine management system 1.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44653 Exploit, Third Party Advisory
- https://www.exploit-db.com/exploits/50561 Exploit, Third Party Advisory, VDB Entry
- https://www.nu11secur1ty.com/2021/12/cve-2021-44653.html Exploit, Third Party Advisory
- https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44653 Exploit, Third Party Advisory
- https://www.exploit-db.com/exploits/50561 Exploit, Third Party Advisory, VDB Entry
- https://www.nu11secur1ty.com/2021/12/cve-2021-44653.html Exploit, Third Party Advisory