E-Learning System 1.0 - SQL Injection
CVE-2021-3239
Verified
Description
E-Learning System 1.0 contains an unauthenticated SQL injection caused by unsanitized input, letting remote attackers execute arbitrary code on the server and gain a reverse shell, exploit requires no authentication.
Severity
Critical
CVSS Score
9.8
Published Date
May 23, 2026
Template Author
xuxeong
CVE-2021-3239.yaml
9.8Score
CVSS Metrics
CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE ID:
cwe-89
Remediation Steps
Apply input validation and parameterized queries, update to the latest version if available.