critical9.8Public exploit code
CVE-2021-44653
Online Magazine Management System 1.0 contains a SQL injection authentication bypass vulnerability.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Online Magazine Management System 1.0 - SQLi Authentication Bypass2021-12-03 · webapps · php
Impact
Online Magazine Management System 1.0 contains a SQL injection authentication bypass vulnerability. The Admin panel authentication can be bypassed due to SQL injection vulnerability in the login form allowing attacker to gain access as admin to the application.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oretnom23 | Online Magazine Management System | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44653
- https://www.exploit-db.com/exploits/50561
- https://www.nu11secur1ty.com/2021/12/cve-2021-44653.html
- https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44653
- https://www.exploit-db.com/exploits/50561
- https://www.nu11secur1ty.com/2021/12/cve-2021-44653.html