CVE-2021-36621 - CVE House
Back to Database
Status published High CVE-2021-36621

Sourcecodester Online Covid Vaccination Scheduler System 1.0 is vulnerable to...

Vulnerability Description

Sourcecodester Online Covid Vaccination Scheduler System 1.0 is vulnerable to SQL Injection. The username parameter is vulnerable to time-based SQL injection. Upon successful dumping the admin password hash, an attacker can decrypt and obtain the plain-text password. Hence, the attacker could authenticate as Administrator.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-36621

Credits & Attribution

No credits recorded in the NVD database.

References

More from online covid vaccination scheduler system project

View All →
CVE-2021-41930
Cross site scripting (XSS) vulnerability in Sourcecodester Online Covid Vaccination...
Medium 6.1
CVE-2021-37803
An SQL Injection vulnerability exists in Sourcecodester Online Covid Vaccination...
High 8.1
CVE-2021-36622
Sourcecodester Online Covid Vaccination Scheduler System 1.0 is affected vulnerable...
Critical 9.8

Affected Vendor

online covid vaccination scheduler system project

View all reports →

Affected Software

online covid vaccination scheduler system
Vulnerable Versions:
1.0

Timeline

Official Publish: July 29th, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.