← Database

CVE-2021-43420

CRITICAL CVSS: 9.8 Published: 2022-01-24 Modified: 2026-06-17

Description

SQL injection vulnerability in Login.php in Sourcecodester Online Payment Hub v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter.

Affected Platforms

Online Payment Hub Project Online Payment Hub

Weakness Type

CWE-89

References