SQL injection vulnerability in PHPGurukul Apartment Visitors Management System (AVMS) v. 1.0 allows attackers to execute arbitrary SQL statements and to gain RCE.
References
| Link | Resource |
|---|---|
| https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-38833 | Exploit Third Party Advisory |
| https://phpgurukul.com/apartment-visitors-management-system-using-php-and-mysql/ | Product Vendor Advisory |
| https://streamable.com/ojobew | Exploit Third Party Advisory |
| https://www.exploit-db.com/exploits/50288 | Exploit Third Party Advisory VDB Entry |
| https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-38833 | Exploit Third Party Advisory |
| https://phpgurukul.com/apartment-visitors-management-system-using-php-and-mysql/ | Product Vendor Advisory |
| https://streamable.com/ojobew | Exploit Third Party Advisory |
| https://www.exploit-db.com/exploits/50288 | Exploit Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 06:18
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-38833 - Exploit, Third Party Advisory | |
| References | () https://phpgurukul.com/apartment-visitors-management-system-using-php-and-mysql/ - Product, Vendor Advisory | |
| References | () https://streamable.com/ojobew - Exploit, Third Party Advisory | |
| References | () https://www.exploit-db.com/exploits/50288 - Exploit, Third Party Advisory, VDB Entry |
Information
Published : 2021-09-13 19:15
Updated : 2024-11-21 06:18
NVD link : CVE-2021-38833
Mitre link : CVE-2021-38833
CVE.ORG link : CVE-2021-38833
JSON object : View
Products Affected
apartment_visitors_management_system_project
- apartment_visitors_management_system
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')