Vulnerability Details CVE-2021-40578
Authenticated Blind & Error-based SQL injection vulnerability was discovered in Online Enrollment Management System in PHP and PayPal Free Source Code 1.0, that allows attackers to obtain sensitive information and execute arbitrary SQL commands via IDNO parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 62.1%
CVSS Severity
CVSS v3 Score 7.2
CVSS v2 Score 6.5
References
- https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/janobe/Online-Enrollment-Management-System
- https://medium.com/%40J03KR/cve-2021-40578-127ceaf3f1bb
- https://www.nu11secur1ty.com/2021/12/online-enrollment-management-system-sql.html
- https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/janobe/Online-Enrollment-Management-System
- https://medium.com/%40J03KR/cve-2021-40578-127ceaf3f1bb
- https://www.nu11secur1ty.com/2021/12/online-enrollment-management-system-sql.html
Products affected by CVE-2021-40578
-
cpe:2.3:a:online_enrollment_management_system_project:online_enrollment_management_system:1.0