CVEvulnerability
CVE-2021-44655
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2021-12-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Online Pre-owned/Used Car Showroom Management System 1.0 contains a SQL injection authentication bypass vulnerability. Admin panel authentication can be bypassed due to SQL injection vulnerability in the login form allowing attacker to get admin access on the application.
Affected configurations
• online pre-owned\/used car showroom management system project online pre-owned\/used car showroom management system 1.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44655 Exploit, Third Party Advisory
- https://www.exploit-db.com/exploits/50560 Exploit, Third Party Advisory, VDB Entry
- https://www.nu11secur1ty.com/2021/12/cve-2021-44655.html Exploit, Third Party Advisory
- https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44655 Exploit, Third Party Advisory
- https://www.exploit-db.com/exploits/50560 Exploit, Third Party Advisory, VDB Entry
- https://www.nu11secur1ty.com/2021/12/cve-2021-44655.html Exploit, Third Party Advisory