Vulnerability Details CVE-2021-33470
COVID19 Testing Management System 1.0 is vulnerable to SQL Injection via the admin panel.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 64.1%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- http://packetstormsecurity.com/files/163014/COVID-19-Testing-Management-System-1.0-SQL-Injection.html
- https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-04
- https://phpgurukul.com/
- https://www.exploit-db.com/exploits/49886
- https://www.nu11secur1ty.com/2021/08/covid-19-contact-tracing-system-web-app.html
- http://packetstormsecurity.com/files/163014/COVID-19-Testing-Management-System-1.0-SQL-Injection.html
- https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-04
- https://phpgurukul.com/
- https://www.exploit-db.com/exploits/49886
- https://www.nu11secur1ty.com/2021/08/covid-19-contact-tracing-system-web-app.html
Products affected by CVE-2021-33470
-
cpe:2.3:a:phpgurukul:covid19_testing_management_system:1.0