CVE-2021-44600

The password parameter on Simple Online Mens Salon Management System (MSMS) 1.0 appears to be vulnerable to SQL injection attacks through the password parameter. The predictive tests of this application interacted with that domain, indicating that the injected SQL query was executed. The attacker can retrieve all authentication and information about the users of this system.

• CWE-89

• https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/MSMSExploit, Third Party Advisory
• https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/MSMSExploit, Third Party Advisory

Published

Dec 23, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-44595Wondershare Dr. Fone Latest version as of 2021-12-06 is vuln…8.8
• CVE-2021-44596Wondershare LTD Dr. Fone as of 2021-12-06 version is affecte…9.8
• CVE-2021-44597Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-44598Attendance Management System 1.0 is affected by a Cross Site…6.1
• CVE-2021-44599The id parameter from Online Enrollment Management System 1.…7.5
• CVE-2021-4460In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2021-44607A Cross Site Scripting (XSS) vulnerability exists in FUEL-CM…5.4
• CVE-2021-44608Multiple Cross Site Scripting (XSS) vulnerabilities exists i…5.4
• CVE-2021-4461Seeyon Zhiyuan OA Web Application System versions up to and …9.3
• CVE-2021-44610Multiple SQL Injection vulnerabilities exist in bloofoxCMS 0…9.8
• CVE-2021-44617A SQL Injection vulnerability exits in the Ramo plugin for G…9.8
• CVE-2021-44618A Server-side Template Injection (SSTI) vulnerability exists…9.8