SQL Injection vulnerability exists in PHPGURUKUL Employee Record Management System 1.2 via the Email POST parameter in /forgetpassword.php.
References
Link | Resource |
---|---|
https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/PHPGURUKUL/ANUJ%20KUMAR/Employee-Record-Management-System-SQL-Injection | Third Party Advisory |
https://www.exploit-db.com/exploits/50467 | Exploit Third Party Advisory VDB Entry |
https://www.nu11secur1ty.com/2021/12/cve-2021-43451.html | Exploit Third Party Advisory |
Configurations
History
25 Sep 2023, 16:46
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:phpgurukul:employee_record_management_system:1.2:*:*:*:*:*:*:* | |
First Time |
Phpgurukul
Phpgurukul employee Record Management System |
Information
Published : 2021-12-01 19:15
Updated : 2024-02-28 18:48
NVD link : CVE-2021-43451
Mitre link : CVE-2021-43451
CVE.ORG link : CVE-2021-43451
JSON object : View
Products Affected
phpgurukul
- employee_record_management_system
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')