SQL Injection Vulnerability in Sourcecodester Repair Shop Management System
CVE-2021-46061

9.8CRITICAL

Key Information:

Vendor: Computer And Mobile Repair Shop Management System Project
Status: Computer And Mobile Repair Shop Management System
Vendor: CVE Published:; 20 January 2022

🔔 Create Computer And Mobile Repair Shop Management System Project Vulnerability Alert

What is CVE-2021-46061?

An SQL Injection vulnerability has been identified in the Sourcecodester Computer and Mobile Repair Shop Management System (RSMS) version 1.0. This flaw allows attackers to manipulate database queries by exploiting the code parameter in the /rsms/ node application. Successful exploitation could enable unauthorized access to sensitive data and impact the integrity of the database.

References

https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/mai...

x_refsource_MISC

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 20, 2022
Vulnerability Reserved
Jan 3, 2022

CVE-2021-46061 Data

JSON