CVE-2021-47846
Digital Crime Report Management System 1.0 - SQL Injection
CVSS Score
8.2
EPSS Score
0.0%
EPSS Percentile
0th
Digital Crime Report Management System 1.0 contains a critical SQL injection vulnerability affecting multiple login pages that allows unauthenticated attackers to bypass authentication. Attackers can exploit the vulnerability by sending crafted SQL injection payloads in email and password parameters across police, incharge, user, and HQ login endpoints.
| CWE | CWE-89 |
| Vendor | i want source codes |
| Product | digital crime report management system |
| Published | Jan 21, 2026 |
| Last Updated | Apr 7, 2026 |
Stay Ahead of the Next One
Get instant alerts for i want source codes digital crime report management system
Be the first to know when new high vulnerabilities affecting i want source codes digital crime report management system are published โ delivered to Slack, Telegram or Discord.
Get Free Alerts โ
Free ยท No credit card ยท 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
Low
Availability
None
Affected Versions
I Want Source Codes / Digital Crime Report Management System
1.0
References
exploit-db.com: https://www.exploit-db.com/exploits/49761 iwantsourcecodes.com: https://iwantsourcecodes.com/digital-crime-report-management-system-in-php-with-source-code/ iwantfilemanager.com: https://iwantfilemanager.com/?dl=b48d951cbdd50568b031aab3b619fed2 vulncheck.com: https://www.vulncheck.com/advisories/digital-crime-report-management-system-sql-injection
Credits
Galuh Muhammad Iman Akbar (GaluhID)