NetSight
critical9.8

CVE-2021-40907

SQL injection vulnerability in Sourcecodester Storage Unit Rental Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the…

Impact

SQL injection vulnerability in Sourcecodester Storage Unit Rental Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter to /storage/classes/Login.php.

Affected products

VendorProductAffected versions
Storage Unit Rental Management System ProjectStorage Unit Rental Management System
Version 1.0

Weakness classification

References