What is CVE-2021-47848?

CVE-2021-47848 is a high-severity vulnerability in Satndy Aplikasi-Biro-Travel, classified under SQL Injection. CVSS score: 8.2/10. Published 2026-01-21.

How severe is CVE-2021-47848?

High severity. CVSS v3 base score is 8.2 out of 10.

SQL Injection in Satndy Aplikasi-Biro-Travel

CVE-2021-47848

Blitar Tourism 1.0 contains an authentication bypass vulnerability that allows attackers to bypass login by injecting SQL code through the username parameter. Attackers can manipulate the login request by sending a crafted username with SQL injection techniques to gain unauthorized administrative access.

Vulnerability class: SQL Injection

EPSS: 0.004 (27.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N.

Affected products

Satndy Aplikasi-biro-travel — versions 1.0

Weakness classification (CWE)

CWE-89 — SQL Injection

References

disclosure@vulncheck.com (exploit)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2021-47848?: CVE-2021-47848 is a high-severity vulnerability in Satndy Aplikasi-Biro-Travel, classified under SQL Injection. CVSS score: 8.2/10. Published 2026-01-21.
How severe is CVE-2021-47848?: High severity. CVSS v3 base score is 8.2 out of 10.