critical9.8Public exploit code
CVE-2021-44655
Online Pre-owned/Used Car Showroom Management System 1.0 contains a SQL injection authentication bypass vulnerability.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Online Pre-owned/Used Car Showroom Management System 1.0 - SQLi Authentication Bypass2021-12-03 · webapps · php
Impact
Online Pre-owned/Used Car Showroom Management System 1.0 contains a SQL injection authentication bypass vulnerability. Admin panel authentication can be bypassed due to SQL injection vulnerability in the login form allowing attacker to get admin access on the application.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Online Pre-Owned\/Used Car Showroom Management System Project | Online Pre-Owned\/Used Car Showroom Management System | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44655
- https://www.exploit-db.com/exploits/50560
- https://www.nu11secur1ty.com/2021/12/cve-2021-44655.html
- https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44655
- https://www.exploit-db.com/exploits/50560
- https://www.nu11secur1ty.com/2021/12/cve-2021-44655.html