PT-2026-41453 · Egavilanmedia · Egavilanmedia Phpcrud

Dimitrios Mitakos · Published 2026-05-16 · Updated 2026-05-16 · CVE-2021-47956

Mitre

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

EgavilanMedia PHPCRUD 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the firstname parameter. Attackers can send POST requests to insert.php with malicious firstname values to extract sensitive database information.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2021-47956

Affected Products

Egavilanmedia Phpcrud

References · 5

• 🔥 https://exploit-db.com/exploits/49878 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47956 · Security Note
• https://egavilanmedia.com · Note
• https://egavilanmedia.com/crud-operation-with-php-mysql-bootstrap-and-dompdf · Note
• https://vulncheck.com/advisories/egavilanmedia-phpcrud-sql-injection-via-firstname · Note