CVE-2021-41433

CVSS 9.8 CRITICALEPSS 0.9%CWE-89

Vexday Risk Score

28Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 9.8EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

27 sep 2022Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

SQL Injection vulnerability exists in version 1.0 of the Resumes Management and Job Application Website application login form by EGavilan Media that allows authentication bypass through login.php.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Productos afectados

n/a · n/a

Referencias

https://github.com/martinkubecka/CVE-References/blob/main/CVE-2021-41433.md https://github.com/martinkubecka/CVE-References/blob/main/Untitled-SQLi.md