SQL Injection Vulnerability in Sourcecodester Online Reviewer System by Janobe
CVE-2021-44090

9.8CRITICAL

Key Information:

Vendor: Sourcecodester Online Reviewer System Project
Status: Sourcecodester Online Reviewer System
Vendor: CVE Published:; 20 January 2022

🔔 Create Sourcecodester Online Reviewer System Project Vulnerability Alert

What is CVE-2021-44090?

An SQL Injection vulnerability has been identified in the Sourcecodester Online Reviewer System 1.0, which allows attackers to manipulate SQL queries via the 'password' parameter. This weakness could potentially enable unauthorized access to sensitive data and lead to severe security breaches, highlighting the importance of secure coding practices and immediate updates to mitigate risks.

References

https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/mai...

x_refsource_MISC

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 20, 2022
Vulnerability Reserved
Nov 22, 2021

CVE-2021-44090 Data

JSON