Vulnerability Details CVE-2021-3278
Local Service Search Engine Management System 1.0 has a vulnerability through authentication bypass using SQL injection . Using this vulnerability, an attacker can bypass the login page.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 73.3%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- http://packetstormsecurity.com/files/162919/Local-Service-Search-Engine-Management-System-1.0-SQL-Injection.html
- https://www.exploit-db.com/exploits/49163
- https://www.sourcecodester.com/php/14607/local-service-search-engine-management-system-using-phpmysqli-source-code.html
- http://packetstormsecurity.com/files/162919/Local-Service-Search-Engine-Management-System-1.0-SQL-Injection.html
- https://www.exploit-db.com/exploits/49163
- https://www.sourcecodester.com/php/14607/local-service-search-engine-management-system-using-phpmysqli-source-code.html
Products affected by CVE-2021-3278
-
Local Services Search Engine Management System Project » Local Services Search Engine Management System » Version: 1.0cpe:2.3:a:local_services_search_engine_management_system_project:local_services_search_engine_management_system:1.0