CVE-2021-44653

Online Magazine Management System 1.0 contains a SQL injection authentication bypass vulnerability. The Admin panel authentication can be bypassed due to SQL injection vulnerability in the login form allowing attacker to gain access as admin to the application.

• CWE-89

• https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44653Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/50561Exploit, Third Party Advisory, VDB Entry
• https://www.nu11secur1ty.com/2021/12/cve-2021-44653.htmlExploit, Third Party Advisory
• https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44653Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/50561Exploit, Third Party Advisory, VDB Entry
• https://www.nu11secur1ty.com/2021/12/cve-2021-44653.htmlExploit, Third Party Advisory

Published

Dec 15, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-44648GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overf…8.8
• CVE-2021-44649Django CMS 3.7.3 does not validate the plugin_type parameter…5.4
• CVE-2021-4465ReQuest Serious Play F3 Media Server versions 7.0.3.4968 (Pr…8.7
• CVE-2021-44650Zoho ManageEngine M365 Manager Plus before Build 4419 allows…7.2
• CVE-2021-44651Zoho ManageEngine CloudSecurityPlus before Build 4117 allows…8.8
• CVE-2021-44652Zoho ManageEngine O365 Manager Plus before Build 4416 allows…7.8
• CVE-2021-44655Online Pre-owned/Used Car Showroom Management System 1.0 con…9.8
• CVE-2021-44657In StackStorm versions prior to 3.6.0, the jinja interpreter…8.8
• CVE-2021-44659Adding a new pipeline in GoCD server version 21.3.0 has a fu…9.8
• CVE-2021-4466IPCop versions up to and including 2.1.9 contain an authenti…8.7
• CVE-2021-44662A Site Scripting (XSS) vulnerability exists in the Xerte Pro…6.1
• CVE-2021-44663A Remote Code Execution (RCE) vulnerability exists in the Xe…9.8