CVE-2021-40907

9.8 criticalEPSS 1.3%

Critical (9.8) in storage unit rental management system project storage unit rental management system. EPSS 1.3% chance of exploitation in the next 30 days.

SQL injection vulnerability in Sourcecodester Storage Unit Rental Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter to /storage/classes/Login.php.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2022-01-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

storage_unit_rental_management_system_project:storage_unit_rental_management_system

References

https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-08-09072021
https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-08-09072021

Check your stack JSON