CVE-2021-42665

9.8 criticalEPSS 4.9%

Critical (9.8) in engineers online portal project engineers online portal. EPSS 4.9% chance of exploitation in the next 30 days.

An SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the login form inside of index.php, which can allow an attacker to bypass authentication.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 4.9% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2021-11-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

engineers_online_portal_project:engineers_online_portal

References

https://github.com/TheHackingRabbi/CVE-2021-42665
https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-42665
https://www.exploit-db.com/exploits/50452
https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html
https://github.com/TheHackingRabbi/CVE-2021-42665

Check your stack JSON