SQL Injection Authentication Bypass Vulnerability in Online Magazine Management System 1.0

CVE-2021-44653 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Online Magazine Management System 1.0 contains a SQL injection authentication bypass vulnerability. The Admin panel authentication can be bypassed due to SQL injection vulnerability in the login form allowing attacker to gain access as admin to the application.

Learn more about our Cis Benchmark Audit For Microsoft Sql Server.