QwikSec

Security Database

CVE

CWE

Training

CVE-2021-37808

Published: Oct 27, 2021

Modified: Aug 4, 2024

PUBLISHED

Description

SQL Injection vulnerabilities exist in https://phpgurukul.com News Portal Project 3.1 via the (1) category, (2) subcategory, (3) sucatdescription, and (4) username parameters, the server response is about (N) seconds delay respectively which mean it is vulnerable to MySQL Blind (Time Based). An attacker can use sqlmap to further the exploitation for extracting sensitive information from the database.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://packetstormsecurity.com/files/163575/News-Portal-Project-3.1-SQL-Injection.html

x_refsource_MISC

https://www.nu11secur1ty.com/2021/12/cve-2021-37808.html

x_refsource_MISC

https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-37808

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.