CVE-2021-41647

An un-authenticated error-based and time-based blind SQL injection vulnerability exists in Kaushik Jadhav Online Food Ordering Web App 1.0. An attacker can exploit the vulnerable "username" parameter in login.php and retrieve sensitive database information, as well as add an administrative user.

• CWE-89

• http://packetstormsecurity.com/files/164422/Online-Food-Ordering-Web-App-SQL-Injection.htmlExploit, Third Party Advisory
• https://github.com/MobiusBinary/CVE-2021-41647Exploit, Third Party Advisory
• https://github.com/kaushikjadhav01/Online-Food-Ordering-Web-AppProduct, Third Party Advisory
• https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41647Exploit, Third Party Advisory
• http://packetstormsecurity.com/files/164422/Online-Food-Ordering-Web-App-SQL-Injection.htmlExploit, Third Party Advisory
• https://github.com/MobiusBinary/CVE-2021-41647Exploit, Third Party Advisory
• https://github.com/kaushikjadhav01/Online-Food-Ordering-Web-AppProduct, Third Party Advisory
• https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41647Exploit, Third Party Advisory

Published

Oct 1, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-4164calibre-web is vulnerable to Cross-Site Request Forgery (CSR…8.8
• CVE-2021-41641Deno <=1.14.0 file sandbox does not handle symbolic links co…8.4
• CVE-2021-41643Remote Code Execution (RCE) vulnerability exists in Sourceco…9.8
• CVE-2021-41644Remote Code Exection (RCE) vulnerability exists in Sourcecod…9.8
• CVE-2021-41645Remote Code Execution (RCE) vulnerability exists in Sourceco…8.8
• CVE-2021-41646Remote Code Execution (RCE) vulnerability exists in Sourceco…9.8
• CVE-2021-41648An un-authenticated SQL Injection exists in PuneethReddyHC o…7.5
• CVE-2021-41649An un-authenticated SQL Injection exists in PuneethReddyHC o…9.8
• CVE-2021-41651A blind SQL injection vulnerability exists in the Raymart DG…7.5
• CVE-2021-41652Insecure permissions in the file database.sdb of BatFlat CMS…7.5
• CVE-2021-41653The PING function on the TP-Link TL-WR840N EU v5 router with…9.8
• CVE-2021-41654SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which…9.8