SQL Injection Vulnerability in Sourcecodester Online Payment Hub by Oretnom23
CVE-2021-43420

9.8CRITICAL

Key Information:

Vendor

Online Payment Hub Project

Status
Online Payment Hub
Vendor
CVE Published:
24 January 2022

What is CVE-2021-43420?

The vulnerability allows attackers to perform SQL injection through the username parameter in Login.php of Sourcecodester Online Payment Hub v1 by oretnom23. This flaw can enable unauthorized access and manipulation of the underlying database, potentially leading to data breaches and compromise of sensitive information. Effective measures should be taken to patch the vulnerability and secure the application against such injection attacks.

References

https://github.com/nu11secur1ty/CVE-nu11secur1ty/blob/mai...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.