Digital Crime Report Management System 1.0 - SQL Injection
Vulnerability Description
Digital Crime Report Management System 1.0 contains a critical SQL injection vulnerability affecting multiple login pages that allows unauthenticated attackers to bypass authentication. Attackers can exploit the vulnerability by sending crafted SQL injection payloads in email and password parameters across police, incharge, user, and HQ login endpoints.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-47846
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Galuh Muhammad Iman Akbar (GaluhID)
References
Affected Vendor
I Want Source Codes
View all reports →