CVE-2021-44599 - CVE House
Back to Database
Status published High CVE-2021-44599

The id parameter from Online Enrollment Management System 1.0 system...

Vulnerability Description

The id parameter from Online Enrollment Management System 1.0 system appears to be vulnerable to SQL injection attacks. A crafted payload injects a SQL sub-query that calls MySQL's load_file function with a UNC file path that references a URL on an external domain. The application interacted with that domain, indicating that the injected SQL query was executed. The attacker can retrieve sensitive information for all users of this system.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-44599

Credits & Attribution

No credits recorded in the NVD database.

References

More from online enrollment management system project

View All →
CVE-2021-40579
https://www.sourcecodester.com/ Online Enrollment Management System in PHP and PayPal Free...
Medium 6.5
CVE-2021-40578
Authenticated Blind & Error-based SQL injection vulnerability was discovered in...
High 7.2
CVE-2021-40577
A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester...
Medium 5.4

Affected Vendor

online enrollment management system project

View all reports →

Affected Software

online enrollment management system
Vulnerable Versions:
1.0

Timeline

Official Publish: December 23rd, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.