Vulnerability Details CVE-2021-43509
SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the id parameter in view-service.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 65.8%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- https://github.com/r4hn1/Simple-Client-Management-System-Exploit/blob/main/CVE-2021-43509
- https://r4hn1.medium.com/journey-to-first-two-cve-by-rahul-kalnarayan-307e2e87ee26
- https://github.com/r4hn1/Simple-Client-Management-System-Exploit/blob/main/CVE-2021-43509
- https://r4hn1.medium.com/journey-to-first-two-cve-by-rahul-kalnarayan-307e2e87ee26
Products affected by CVE-2021-43509
-
cpe:2.3:a:simple_client_management_system_project:simple_client_management_system:1.0