← Database

CVE-2021-44966

CRITICAL CVSS: 9.8 Published: 2021-12-13 Modified: 2026-06-17

Description

SQL injection bypass authentication vulnerability in PHPGURUKUL Employee Record Management System 1.2 via index.php. An attacker can log in as an admin account of this system and can destroy, change or manipulate all sensitive information on the system.

Affected Platforms

Phpgurukul Employee Record Management System

Weakness Type

CWE-89

References