Attacker Value
Very High
CVE-2021-36624
CVE-2021-36624
(Last updated October 07, 2023) ▾
MITRE ATT&CK
Log in to add MITRE ATT&CK tag
Add MITRE ATT&CK tactics and techniques that apply to this CVE.
Execution
Techniques
Validation
Description
Sourcecodester Phone Shop Sales Managements System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
Add Assessment
1
Technical Analysis
CVE-2021-36624
Vulnerable PHP code and logic: ExLogin.php
<?php // Start the session session_start(); include '../config/config.php'; include '../config/config1.php'; include '../config/connect.php'; $UName = ($_POST["Username"]); $PW = ($_POST["Password"]); $PassWord=0; $UserName=0; $quer= mysqli_query($conn,"SELECT * FROM user where username='$UName' AND passwourd='$PW'"); while($ss = mysqli_fetch_array($quer)) { $UserName=$ss['username']; $PassWord=$ss['passwourd']; $userid=$ss['userid']; $name=$ss['name']; $profilepicture=$ss['profilepicture']; $IDBranch=$ss['IDBranch']; $role=$ss['role']; } if($PassWord!=$PW || $UserName!=$UName ){ echo "<script>alert('Incorrect UserName or Password')</script>"; echo "<script>location.href='../index.php'</script>"; } else { $_SESSION["Id"]=$userid; $_SESSION["name"]=$name; $_SESSION["profilepicture"]=$profilepicture; $_SESSION["IDBranch"]=$IDBranch; $_SESSION["role"]=$role; ?> <!--<script> var person = prompt("Please enter your name", "Harry Potter"); if (person != null) { document.getElementById("demo").innerHTML = "Hello " + person + "! How are you today?"; } </script>--> <script>location.href='../dashboard.php'</script>"; --> <?php } ?>
Description:
Sourcecodester Phone Shop Sales Managements System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
Reproduce:
Proof:
BR nu11secur1ty
CVSS V3 Severity and Metrics
Data provided by the National Vulnerability Database (NVD)
Base Score:
9.8 Critical
Impact Score:
5.9
Exploitability Score:
3.9
Attack Vector (AV):
Network
Attack Complexity (AC):
Low
Privileges Required (PR):
None
User Interaction (UI):
None
Scope (S):
Unchanged
Confidentiality (C):
High
Integrity (I):
High
Availability (A):
High
General Information
Vendors
- phone shop sales management system project
Products
- phone shop sales management system 1.0
