Published: 05/11/2021 Updated: 28/11/2021

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

A SQL Injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP in event-management/views. An attacker can leverage this vulnerability in order to manipulate the sql query performed. As a result he can extract sensitive data from the web server and in some cases he can use this vulnerability in order to get a remote code execution on the remote web server.

Vulnerable Product	Search on Vulmon	Subscribe to Product
online event booking and reservation system project online event booking and reservation system 2.3.0

CVE-2021-42667 - SQL Injection vulnerability in the Online event booking and reservation system.

CVE-2021-42667 CVE-2021-42667 - SQL Injection vulnerability in the Online event booking and reservation system version 230 Technical description: An SQL Injection vulnerability exists in the Event management software version 230 An attacker can leverage the vulnerable "id" parameter in the "USER" web page in order to manipulate the sql query performed

CVE-2021-42667 - SQL Injection vulnerability in the Online event booking and reservation system.

CVE-2021-42667 CVE-2021-42667 - SQL Injection vulnerability in the Online event booking and reservation system version 230 Technical description: An SQL Injection vulnerability exists in the Event management software version 230 An attacker can leverage the vulnerable "id" parameter in the "USER" web page in order to manipulate the sql query performed

CWE-89 https://github.com/TheHackingRabbi/CVE-2021-42667 https://www.sourcecodester.com/php/14241/online-event-booking-and-reservation-system-phpmysql.html https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-42667 https://nvd.nist.gov https://github.com/0xDeku/CVE-2021-42667

CVE-2021-42667

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect