CVE-2021-41647

9.1 CRITICAL

An un-authenticated error-based and time-based blind SQL injection vulnerability exists in Kaushik Jadhav Online Food Ordering Web App 1.0

Published: 2021-10-01 · Last updated: 2026-06-17

Severity and scoring

CVSS: 9.1 CRITICAL
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE: CWE-89

Affected products

Vendor	Product
online_food_ordering_web_app_project	online_food_ordering_web_app

Description

An un-authenticated error-based and time-based blind SQL injection vulnerability exists in Kaushik Jadhav Online Food Ordering Web App 1.0. An attacker can exploit the vulnerable "username" parameter in login.php and retrieve sensitive database information, as well as add an administrative user.

Source: NVD

References

[NVD]https://nvd.nist.gov/vuln/detail/CVE-2021-41647
[Exploit reference]http://packetstormsecurity.com/files/164422/Online-Food-Ordering-Web-App-SQL-Injection.html
[Exploit reference]https://github.com/MobiusBinary/CVE-2021-41647
[Other]https://github.com/kaushikjadhav01/Online-Food-Ordering-Web-App
[Exploit reference]https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41647
[Exploit reference]http://packetstormsecurity.com/files/164422/Online-Food-Ordering-Web-App-SQL-Injection.html
[Exploit reference]https://github.com/MobiusBinary/CVE-2021-41647
[Other]https://github.com/kaushikjadhav01/Online-Food-Ordering-Web-App
[Exploit reference]https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41647

Related CVEs

Same CWE

CVE-2026-52715 — Unauthenticated SQL Injection in GEO my WordPress <= 4.5.5 versions (9.3 CRITICAL)
CVE-2026-52712 — Subscriber SQL Injection in Attendance Manager <= 0.6.2 versions (7.6 HIGH)
CVE-2026-49772 — Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP The Events C... (9.3 CRITICAL)
CVE-2026-39581 — Subscriber SQL Injection in WP Sessions Time Monitoring Full Automatic <= 1.1.4 versions (8.5 HIGH)
CVE-2026-39574 — Unauthenticated SQL Injection in InPost Gallery <= 2.1.4.6 versions (9.3 CRITICAL)