CVE-2021-40908: Purchase Order Management System Project Purchase Order Management System

Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days.

SQL injection vulnerability in Login.php in Sourcecodester Purchase Order Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter.

Affected products

• Purchase Order Management System Project Purchase Order Management System: version 1.0 only

Published 2022-01-24. Last modified 2026-06-17.