CVE-2021-41511

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The username and password field of login in Lodging Reservation Management System V1 can give access to any user by using SQL injection to bypass authentication.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/164366/Lodging-Reservation-Management-System-1.0-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
https://github.com/Ni7inSharma/CVE-2021-41511Exploit, Third Party Advisory
https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41511Third Party Advisory
https://streamable.com/9fq8uwExploit, Third Party Advisory
https://www.exploit-db.com/exploits/50372Exploit, Third Party Advisory, VDB Entry
https://www.nu11secur1ty.com/2021/10/cve-2021-41511.htmlExploit, Third Party Advisory
https://www.sourcecodester.com/php/14883/lodging-reservation-management-system-php-free-source-code.htmlProduct, Third Party Advisory
http://packetstormsecurity.com/files/164366/Lodging-Reservation-Management-System-1.0-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
https://github.com/Ni7inSharma/CVE-2021-41511Exploit, Third Party Advisory
https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41511Third Party Advisory
https://streamable.com/9fq8uwExploit, Third Party Advisory
https://www.exploit-db.com/exploits/50372Exploit, Third Party Advisory, VDB Entry
https://www.nu11secur1ty.com/2021/10/cve-2021-41511.htmlExploit, Third Party Advisory
https://www.sourcecodester.com/php/14883/lodging-reservation-management-system-php-free-source-code.htmlProduct, Third Party Advisory

Timeline

Published: Oct 4, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-415247.5While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to CVE-2021-415255.5An issue related to modification of otherwise restricted files through a locally authenticated attacker exists in FlexNet inventory agent an CVE-2021-415267.8A vulnerability has been reported in the windows installer (MSI) built with InstallScript custom action. This vulnerability may allow privil CVE-2021-415272.3An error related to the 2-factor authorization (2FA) on the RISC Platform prior to the saas-2021-12-29 release can potentially be exploited CVE-2021-415285.3An error when handling authorization related to the import / export interfaces on the RISC Platform prior to the saas-2021-12-29 release can CVE-2021-415307.5Forcepoint NGFW Engine versions 6.5.11 and earlier, 6.8.6 and earlier, and 6.10.0 are vulnerable to TCP reflected amplification vulnerabilit CVE-2021-415317.5NLnet Labs Routinator prior to 0.10.0 produces invalid RTR payload if an RPKI CA uses too large values in the max-length parameter in a ROA.CVE-2021-415325.3In Apache Ozone before 1.2.0, Recon HTTP endpoints provide access to OM, SCM and Datanode metadata. Due to a bug, any unauthenticated user c CVE-2021-415333.3A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The affected app CVE-2021-415343.3A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The affected app CVE-2021-415357.8A vulnerability has been identified in NX 1953 Series (All versions < V1973.3700), NX 1980 Series (All versions < V1988), Solid Edge SE2021 CVE-2021-415367.8A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains a use-after-free vuln