← Database

CVE-2021-40908

CRITICAL CVSS: 9.8 Published: 2022-01-24 Modified: 2026-06-17

Description

SQL injection vulnerability in Login.php in Sourcecodester Purchase Order Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter.

Affected Platforms

Purchase Order Management System Project Purchase Order Management System

Weakness Type

CWE-89

References