Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2021-42668 — Proof-of-concept exploit for CVE-2021-42668, a SQL injection in Engineers Online Portal. Uses the vulnerable id parameter in my_classmates.php to extract MySQL version. | Kitploit
Tools/GitHubGitHub/0xdeku/cve-2021-42668
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingDatabase Security
GitHub0xdeku/cve-2021-42668

CVE-2021-42668

Proof-of-concept exploit for CVE-2021-42668, a SQL injection in Engineers Online Portal. Uses the vulnerable id parameter in my_classmates.php to extract MySQL version.

View Repository
1104 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

cve-2021-42668

CVE-2021-42668 - SQL Injection vulnerability in the Engineers online portal system.

Technical description:

An SQL Injection vulnerability exists in the Engineers Online Portal. An attacker can leverage the vulnerable "id" parameter in the "my_classmates.php" web page in order to manipulate the sql query performed. As a result the attacker can extract sensitive data from the web server.

Affected components -

Vulnerable page - my_classmates.php

Vulnerable parameter - "id"

Steps to exploit:

  1. Navigate to http://localhost/nia_munoz_monitoring_system/my_classmates.php
  2. Insert your payload in the id parameter

Proof of concept (Poc) -

The following payload will allow you to extract the MySql server version running on the web server -

' union select NULL,NULL,NULL,NULL,NULL,@@version,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL;-- -

CVE-2021-42668

References -

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42668

https://nvd.nist.gov/vuln/detail/CVE-2021-42668

Discovered by -

Alon Leviev(0xDeku), 22 October, 2021.

Download Tool