CVE-2021-44599

The id parameter from Online Enrollment Management System 1.0 system appears to be vulnerable to SQL injection attacks. A crafted payload injects a SQL sub-query that calls MySQL's load_file function with a UNC file path that references a URL on an external domain. The application interacted with that domain, indicating that the injected SQL query was executed. The attacker can retrieve sensitive information for all users of this system.

• CWE-89

• https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/janobe/Online-Enrollment-Management-SystemExploit, Third Party Advisory
• https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/janobe/Online-Enrollment-Management-SystemExploit, Third Party Advisory

Published

Dec 23, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-44591In libming 0.4.8, the parseSWF_DEFINELOSSLESS2 function in u…6.5
• CVE-2021-44593Simple College Website 1.0 is vulnerable to unauthenticated …8.1
• CVE-2021-44595Wondershare Dr. Fone Latest version as of 2021-12-06 is vuln…8.8
• CVE-2021-44596Wondershare LTD Dr. Fone as of 2021-12-06 version is affecte…9.8
• CVE-2021-44597Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-44598Attendance Management System 1.0 is affected by a Cross Site…6.1
• CVE-2021-4460In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2021-44600The password parameter on Simple Online Mens Salon Managemen…7.5
• CVE-2021-44607A Cross Site Scripting (XSS) vulnerability exists in FUEL-CM…5.4
• CVE-2021-44608Multiple Cross Site Scripting (XSS) vulnerabilities exists i…5.4
• CVE-2021-4461Seeyon Zhiyuan OA Web Application System versions up to and …9.3
• CVE-2021-44610Multiple SQL Injection vulnerabilities exist in bloofoxCMS 0…9.8