CVE-2021-41511

9.8 criticalEPSS 3.3%

Critical (9.8) in lodging reservation management system project lodging reservation management system. EPSS 3.3% chance of exploitation in the next 30 days.

The username and password field of login in Lodging Reservation Management System V1 can give access to any user by using SQL injection to bypass authentication.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.3% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2021-10-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

lodging_reservation_management_system_project:lodging_reservation_management_system

References

http://packetstormsecurity.com/files/164366/Lodging-Reservation-Management-System-1.0-SQL-Injection.html
https://github.com/Ni7inSharma/CVE-2021-41511
https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41511
https://streamable.com/9fq8uw
https://www.exploit-db.com/exploits/50372

Check your stack JSON