An SQL Injection vulnerability exists in Courcecodester COVID 19 Testing Management System (CTMS) 1.0 via the (1) username and (2) contactno parameters.
References
Link | Resource |
---|---|
https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/unyasoft/CTMS | Exploit Third Party Advisory |
https://www.nu11secur1ty.com/2021/11/ctms.html | Exploit Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2022-01-20T18:38:04
Updated: 2022-01-20T18:38:04
Reserved: 2021-11-29T00:00:00
Link: CVE-2021-44245
JSON object: View
NVD Information
Status : Analyzed
Published: 2022-01-20T19:15:07.803
Modified: 2022-01-26T19:45:21.513
Link: CVE-2021-44245
JSON object: View
Redhat Information
No data.
CWE