CVE-2021-41647

CRITICAL 9.1CVE-2021-41647 · Published 01/10/2021 · updated 17/06/2026

In short

CVE-2021-41647 is a CRITICAL (CVSS 9.1) vulnerability affecting online food ordering web app (online food ordering web app project).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 81.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
online food ordering web app online_food_ordering_web_app_project	`= 1.0`	No fix yet

Description

An un-authenticated error-based and time-based blind SQL injection vulnerability exists in Kaushik Jadhav Online Food Ordering Web App 1.0. An attacker can exploit the vulnerable "username" parameter in login.php and retrieve sensitive database information, as well as add an administrative user.

References

packetstormsecurity.com/files/164422/Online-Food-Ordering-Web-App-SQL-Injection.html · Exploit
MobiusBinary/CVE-2021-41647 · Exploit
kaushikjadhav01/Online-Food-Ordering-Web-App · Product
nu11secur1ty/CVE-mitre · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free