PT-2026-3801 · Satndy · Aplikasi-Biro-Travel

Sigeri94 · Published 2026-01-21 · Updated 2026-01-21 · CVE-2021-47848

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Blitar Tourism version 1.0

Description An authentication bypass allows attackers to gain unauthorized administrative access by injecting SQL code through the username parameter during the login request.

Recommendations Update Blitar Tourism version 1.0 to a version that addresses this issue. As a temporary workaround, restrict access to the login functionality or implement input validation for the username parameter.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2021-47848

Affected Products

Aplikasi-Biro-Travel

References · 4

• 🔥 https://exploit-db.com/exploits/49759 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47848 · Security Note
• https://github.com/satndy/Aplikasi-Biro-Travel · Note
• https://vulncheck.com/advisories/blitar-tourism-authentication-bypass-sqli · Note