CVE-2021-45334

Опубликовано: 10 янв. 2022

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection. An attacker can bypass admin authentication and gain access to admin panel using SQL Injection

Ссылки

https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-45334
Exploit
Third Party Advisory
https://packetstormsecurity.com/files/165272/Online-Thesis-Archiving-System-1.0-SQL-Injection-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/50597
Exploit
Third Party Advisory
VDB Entry
https://www.nu11secur1ty.com/2022/01/cve-2021-45334.html
Exploit
Third Party Advisory
https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-45334
Exploit
Third Party Advisory
https://packetstormsecurity.com/files/165272/Online-Thesis-Archiving-System-1.0-SQL-Injection-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/50597
Exploit
Third Party Advisory
VDB Entry
https://www.nu11secur1ty.com/2022/01/cve-2021-45334.html
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:online_thesis_archiving_system_project:online_thesis_archiving_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 47%

0.00242

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-fhr5-r945-frm5

github

около 4 лет назад