PT-2021-21874

CVE-2021-37803

·

Published

2021-10-27

·

Updated

2021-11-02

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Sourcecodester Online Covid Vaccination Scheduler System version 1.0
Description: An SQL Injection issue exists via the username in lognin.php.
Recommendations: For Sourcecodester Online Covid Vaccination Scheduler System version 1.0, consider restricting access to the lognin.php file until a patch is available. As a temporary workaround, avoid using the username variable in the affected login functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾