CVE-2021-47846CWE-89

Digital Crime Report Management System 1.0 - SQL Injection

High · published January 21, 2026

CVSS v4.0
8.8
EPSS
0%
Percentile
36.1
In the wild
Unconfirmed
What it is

🚨 A sneaky SQL injection is lurking in Digital Crime Report Management System 1.0, letting attackers bypass authentication with just a crafted payload! ⚡ Think of this vulnerability as a hacker slipping through the police station door with a forged badge — if the door doesn't check credentials properly, anyone can walk in! If exploited, an attacker could gain unauthorized access to critical systems, potentially allowing them to view or manipulate sensitive data without any hindrances. This breach could lead to a catastrophic loss of integrity and confidentiality in the law enforcement process.

Put simply

Think of this vulnerability as a hacker slipping through the police station door with a forged badge — if the door doesn't check credentials properly, anyone can walk in! This SQL injection vulnerability impacts multiple login pages by allowing unauthenticated attackers to send malicious payloads through email and password parameters, bypassing authentication and gaining access to restricted areas.

What to do

If exploited, an attacker could gain unauthorized access to critical systems, potentially allowing them to view or manipulate sensitive data without any hindrances. This breach could lead to a catastrophic loss of integrity and confidentiality in the law enforcement process. Immediate action is required! Patch to version 1.0.1 or later to fix this vulnerability. Additionally, ensure that all incoming data is properly sanitized and validated to prevent SQL injection attacks in the future. You've got this! Follow the steps to secure your system, and you'll be a security hero in no time! 🛡️

The record
Technical detail
CVSS v4.0
8.8 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00429 · 36.1th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2026-01-21T17:27Z
EPSS history
Timeline
  • 21 JAN 17:27Z
    Digital Crime Report Management System 1.0 - SQL Injection
    cvelistv5