CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2021-41492
Critical (9.8) in simple cashiering system project simple cashiering system. EPSS 1.7% chance of exploitation in the next 30 days.
Multiple SQL Injection vulnerabilities exist in Sourcecodester Simple Cashiering System (POS) 1.0 via the (1) Product Code in the pos page in cashiering. (2) id parameter in manage_products and the (3) t paramater in actions.php.
Severity
- EPSS
- 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
- CWE
- CWE-89
- Published
- Modified
- Record from
- the NVD, synced
Affected
- simple_cashiering_system_project:simple_cashiering_system
References
- https://3xpl017.blogspot.com/2021/09/multiple-sql-injections-in.html
- https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41492
- https://www.nu11secur1ty.com/2021/12/cve-2021-41492.html
- https://3xpl017.blogspot.com/2021/09/multiple-sql-injections-in.html
- https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41492