CVEs-PoC/2021/CVE-2021-41651.md

CVE-2021-41651

Description

A blind SQL injection vulnerability exists in the Raymart DG / Ahmed Helal Hotel-mgmt-system. A malicious attacker can retrieve sensitive database information and interact with the database using the vulnerable cid parameter in process_update_profile.php.

POC

Reference

• https://github.com/MobiusBinary/CVE-2021-41651/

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/MobiusBinary/CVE-2021-41651