CVE-2021-36621

Sourcecodester Online Covid Vaccination Scheduler System 1.0 is vulnerable to SQL Injection. The username parameter is vulnerable to time-based SQL injection. Upon successful dumping the admin password hash, an attacker can decrypt and obtain the plain-text password. Hence, the attacker could authenticate as Administrator.

• CWE-89

• http://packetstormsecurity.com/files/164324/Covid-Vaccination-Scheduler-System-1.0-SQL-Injection-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-18-09-2821Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/50109Exploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/164324/Covid-Vaccination-Scheduler-System-1.0-SQL-Injection-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-18-09-2821Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/50109Exploit, Third Party Advisory, VDB Entry

Published

Jul 30, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-36608Cross Site Scripting (XSS) vulnerability in webTareas 2.2p1 …5.4
• CVE-2021-36609Cross Site Scripting (XSS) vulnerability in webTareas 2.2p1 …5.4
• CVE-2021-3661A potential security vulnerability has been identified in ce…8.4
• CVE-2021-36613Mikrotik RouterOs before stable 6.48.2 suffers from a memory…6.5
• CVE-2021-36614Mikrotik RouterOs before stable 6.48.2 suffers from a memory…6.5
• CVE-2021-3662Certain HP Enterprise LaserJet and PageWide MFPs may be vuln…5.4
• CVE-2021-36622Sourcecodester Online Covid Vaccination Scheduler System 1.0…9.8
• CVE-2021-36623Arbitrary File Upload in Sourcecodester Phone Shop Sales Man…9.8
• CVE-2021-36624Sourcecodester Phone Shop Sales Managements System version 1…9.8
• CVE-2021-36625An SQL Injection vulnerability exists in Dolibarr ERP/CRM 13…8.8
• CVE-2021-36628Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-3663firefly-iii is vulnerable to Improper Restriction of Excessi…7.5