CVE-2021-41511

The username and password field of login in Lodging Reservation Management System V1 can give access to any user by using SQL injection to bypass authentication.

• CWE-89

• http://packetstormsecurity.com/files/164366/Lodging-Reservation-Management-System-1.0-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/Ni7inSharma/CVE-2021-41511Exploit, Third Party Advisory
• https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41511Third Party Advisory
• https://streamable.com/9fq8uwExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/50372Exploit, Third Party Advisory, VDB Entry
• https://www.nu11secur1ty.com/2021/10/cve-2021-41511.htmlExploit, Third Party Advisory
• https://www.sourcecodester.com/php/14883/lodging-reservation-management-system-php-free-source-code.htmlProduct, Third Party Advisory
• http://packetstormsecurity.com/files/164366/Lodging-Reservation-Management-System-1.0-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/Ni7inSharma/CVE-2021-41511Exploit, Third Party Advisory
• https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41511Third Party Advisory
• https://streamable.com/9fq8uwExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/50372Exploit, Third Party Advisory, VDB Entry
• https://www.nu11secur1ty.com/2021/10/cve-2021-41511.htmlExploit, Third Party Advisory
• https://www.sourcecodester.com/php/14883/lodging-reservation-management-system-php-free-source-code.htmlProduct, Third Party Advisory

Published

Oct 4, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-4150A use-after-free flaw was found in the add_partition in bloc…5.5
• CVE-2021-41500Incomplete string comparison vulnerability exits in cvxopt.o…7.5
• CVE-2021-41502An issue was discovered in Subrion CMS v4.2.1 There is a sto…5.4
• CVE-2021-41503DCS-5000L v1.05 and DCS-932L v2.17 and older are affecged by…8
• CVE-2021-41504An Elevated Privileges issue exists in D-Link DCS-5000L v1.0…8
• CVE-2021-41506Xiaongmai AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7…9.8
• CVE-2021-41524While fuzzing the 2.4.49 httpd, a new null pointer dereferen…7.5
• CVE-2021-41525An issue related to modification of otherwise restricted fil…5.5
• CVE-2021-41526A vulnerability has been reported in the windows installer (…7.8
• CVE-2021-41527An error related to the 2-factor authorization (2FA) on the …2.3
• CVE-2021-41528An error when handling authorization related to the import /…5.3
• CVE-2021-41530Forcepoint NGFW Engine versions 6.5.11 and earlier, 6.8.6 an…7.5