.. / CVE-2021-42667

• SQLi
• Nuclei
• Web

Exploit for Online Event Booking and Reservation System 2.3.0 - SQL Injection (CVE-2021-42667)

Description:

Online Event Booking and Reservation System 2.3.0 contains a SQL injection vulnerability in event-management/views. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site.

Nuclei Template

View the template here CVE-2021-42667.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-42667.yaml

References: