CVE-2021-3239

CRITICAL 9.8CVE-2021-3239 · Published 15/02/2021 · updated 17/06/2026

Package	Affected versions	Patched versions
e-learning system e-learning_system_project	`= 1.0`	No fix yet

Description

E-Learning System 1.0 suffers from an unauthenticated SQL injection vulnerability, which allows remote attackers to execute arbitrary code on the hosting web server and gain a reverse shell.

References

TCSWT/E-Learning-System · Exploit
nu11secur1ty/CVE-nu11secur1ty · Exploit
packetstormsecurity.com/files/160966/E-Learning-System-1.0-SQL-Injection-Shell-Upload.html · Exploit
exploit-db.com/exploits/49434 · Exploit
sourcecodester.com/php/12808/e-learning-system-using-phpmysqli.html · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free