CVE-2021-38833

Опубликовано: 13 сент. 2021

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in PHPGurukul Apartment Visitors Management System (AVMS) v. 1.0 allows attackers to execute arbitrary SQL statements and to gain RCE.

Ссылки

https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-38833
Exploit
Third Party Advisory
https://phpgurukul.com/apartment-visitors-management-system-using-php-and-mysql/
Product
Vendor Advisory
https://streamable.com/ojobew
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/50288
Exploit
Third Party Advisory
VDB Entry
https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-38833
Exploit
Third Party Advisory
https://phpgurukul.com/apartment-visitors-management-system-using-php-and-mysql/
Product
Vendor Advisory
https://streamable.com/ojobew
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/50288
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:apartment_visitors_management_system_project:apartment_visitors_management_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 62%

0.00426

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-m9pc-6vm2-63f5

github

больше 3 лет назад