CVE-2021-47846

Impact

Digital Crime Report Management System 1.0 contains a critical SQL injection vulnerability affecting multiple login pages that allows unauthenticated attackers to bypass authentication. Attackers can exploit the vulnerability by sending crafted SQL injection payloads in email and password parameters across police, incharge, user, and HQ login endpoints.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://iwantfilemanager.com/?dl=b48d951cbdd50568b031aab3b619fed2
• https://iwantsourcecodes.com/digital-crime-report-management-system-in-php-with-source-code/
• https://www.exploit-db.com/exploits/49761
• https://www.vulncheck.com/advisories/digital-crime-report-management-system-sql-injection