EXPOSURES › CVE-2021-44088

CVE-2021-44088

CRITICAL

DETAIL

SourceNVD · cve Published2022-03-17 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2021-44088 ↗

SHAME 35/100

An SQL Injection vulnerability exists in Sourcecodester Attendance and Payroll System v1.0 which allows a remote attacker to bypass authentication via unsanitized login parameters.

▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED

attendance and payroll system project · vendor attendance and payroll system · product

DESCRIPTION

An SQL Injection vulnerability exists in Sourcecodester Attendance and Payroll System v1.0 which allows a remote attacker to bypass authentication via unsanitized login parameters.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.