← Database

CVE-2021-42665

CRITICAL CVSS: 9.8 Published: 2021-11-05 Modified: 2026-06-17

Description

An SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the login form inside of index.php, which can allow an attacker to bypass authentication.

Affected Platforms

Engineers Online Portal Project Engineers Online Portal

Weakness Type

CWE-89

References