{"id":"CVE-2021-44653","aliases":["EUVD-2021-31473","GHSA-fh2q-x8q6-w283"],"status":"published","title":"Online Magazine Management System 1.0 contains a SQL injection authentication bypass...","description":"Online Magazine Management System 1.0 contains a SQL injection authentication bypass vulnerability. The Admin panel authentication can be bypassed due to SQL injection vulnerability in the login form allowing attacker to gain access as admin to the application.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.06022,"percentile":0.93438,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-89"],"published":"2021-12-15T15:35:14Z","modified":"2026-06-17T04:12:38Z","exploits":[{"source":"exploitdb","id":"EDB-50561","title":"Online Magazine Management System 1.0 - SQLi Authentication Bypass","type":"webapps","platform":"php","date":"2021-12-03","url":"https://www.exploit-db.com/exploits/50561"}],"products":[{"vendor":"oretnom23","product":"online_magazine_management_system"}],"references":[{"url":"https://www.exploit-db.com/exploits/50561","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44653","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://www.nu11secur1ty.com/2021/12/cve-2021-44653.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44653"},{"url":"https://github.com/advisories/GHSA-fh2q-x8q6-w283"}],"sources":{"cve":[{"id":"CVE-2021-44653","description":"Online Magazine Management System 1.0 contains a SQL injection authentication bypass vulnerability. The Admin panel authentication can be bypassed due to SQL injection vulnerability in the login form allowing attacker to gain access as admin to the application.","status":"published","published":"2021-12-15T15:35:14Z","modified":"2024-08-04T04:25:16.862Z","updated_at":"2026-11-02T14:33:01.166399Z"}],"euvd":[{"id":"EUVD-2021-31473","description":"Online Magazine Management System 1.0 contains a SQL injection authentication bypass vulnerability. The Admin panel authentication can be bypassed due to SQL injection vulnerability in the login form allowing attacker to gain access as admin to the application.","status":"published","published":"2021-12-15T15:35:14Z","modified":"2024-08-04T04:25:16Z","updated_at":"2026-11-03T03:08:28.560815Z"}],"ghsa":[{"id":"GHSA-fh2q-x8q6-w283","title":"Online Magazine Management System 1.0 contains a SQL injection authentication bypass...","description":"Online Magazine Management System 1.0 contains a SQL injection authentication bypass vulnerability. The Admin panel authentication can be bypassed due to SQL injection vulnerability in the login form allowing attacker to gain access as admin to the application.","status":"published","published":"2021-12-16T00:01:38Z","modified":"2023-02-01T05:07:09Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:50:29.480738Z"}],"nvd":[{"id":"CVE-2021-44653","description":"Online Magazine Management System 1.0 contains a SQL injection authentication bypass vulnerability. The Admin panel authentication can be bypassed due to SQL injection vulnerability in the login form allowing attacker to gain access as admin to the application.","status":"published","published":"2021-12-15T16:15:07.697Z","modified":"2026-06-17T04:12:38.847Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:07:02.189991Z"}]}}