What’s Vulnerable › Vulnerabilities

CVE-2021-42169

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-10-22 · updated 2026-06-17
• Weakness: CWE-89

Description

The Simple Payroll System with Dynamic Tax Bracket in PHP using SQLite Free Source Code (by: oretnom23 ) is vulnerable from remote SQL-Injection-Bypass-Authentication for the admin account. The parameter (username) from the login form is not protected correctly and there is no security and escaping from malicious payloads.

Affected products

• SourceCodester Simple Payroll System: 1.0

References

• https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-21-100521
• https://www.exploit-db.com/exploits/50403
• https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-21-100521
• https://www.exploit-db.com/exploits/50403

Get alerted when CVE-2021-42169 or the next vulnerability affects your stack