CVE-2021-3278

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Local Service Search Engine Management System 1.0 has a vulnerability through authentication bypass using SQL injection . Using this vulnerability, an attacker can bypass the login page.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/162919/Local-Service-Search-Engine-Management-System-1.0-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/49163Exploit, Third Party Advisory, VDB Entry
https://www.sourcecodester.com/php/14607/local-service-search-engine-management-system-using-phpmysqli-source-code.htmlThird Party Advisory
http://packetstormsecurity.com/files/162919/Local-Service-Search-Engine-Management-System-1.0-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/49163Exploit, Third Party Advisory, VDB Entry
https://www.sourcecodester.com/php/14607/local-service-search-engine-management-system-using-phpmysqli-source-code.htmlThird Party Advisory

Timeline

Published: Jan 26, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-327807.5Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions Envoy CVE-2021-327817.5Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions after CVE-2021-327825.4Nextcloud Circles is an open source social network built for the nextcloud ecosystem. In affected versions the Nextcloud Circles application CVE-2021-327838.5Contour is a Kubernetes ingress controller using Envoy proxy. In Contour before version 1.17.1 a specially crafted ExternalName type Service CVE-2021-327857.5mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party,CVE-2021-327866.1mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party,CVE-2021-327874.3Sourcegraph is a code search and navigation engine. Sourcegraph before version 3.30.0 has two potential information leaks. The site-admin ar CVE-2021-327884.3Discourse is an open source discussion platform. In versions prior to 2.7.7 there are two bugs which led to the post creator of a whisper po CVE-2021-327897.5woocommerce-gutenberg-products-block is a feature plugin for WooCommerce Gutenberg Blocks. An SQL injection vulnerability impacts all WooCom CVE-2021-32796.1sz.chat version 4 allows injection of web scripts and HTML in the message box.CVE-2021-327904.9Woocommerce is an open source eCommerce plugin for WordPress. An SQL injection vulnerability impacts all WooCommerce sites running the WooCo CVE-2021-327915.9mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party,