critical9.8
CVE-2021-43509
SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the id parameter in view-service.php.
Impact
SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the id parameter in view-service.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Simple Client Management System Project | Simple Client Management System | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/r4hn1/Simple-Client-Management-System-Exploit/blob/main/CVE-2021-43509
- https://r4hn1.medium.com/journey-to-first-two-cve-by-rahul-kalnarayan-307e2e87ee26
- https://github.com/r4hn1/Simple-Client-Management-System-Exploit/blob/main/CVE-2021-43509
- https://r4hn1.medium.com/journey-to-first-two-cve-by-rahul-kalnarayan-307e2e87ee26