High 8.2Published Jan 21, 2026

CVE-2021-47846Digital Crime Report Management System 1.0 - SQL Injection

Updated under an hour ago (Oct 27, 2026, 2:50 AM ET)

Does this affect you?

It affects I Want Source Codes Digital Crime Report Management System. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for I Want Source Codes Digital Crime Report Management System

Exploited in the last 30 days

Digital Crime Report Management System 1.0 contains a critical SQL injection vulnerability affecting multiple login pages that allows unauthenticated attackers to bypass authentication. Attackers can exploit the vulnerability by sending crafted SQL injection payloads in email and password parameters across police, incharge, user, and HQ login endpoints.

CVSS: 8.2 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Weakness (CWE): CWE-89
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: VulnCheck
NVD analysis: Deferred
Record last updated: Apr 7, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

I Want Source Codes Digital Crime Report Management System i_want_source_codes:digital_crime_report_management_system (from the name)	1.0	CNA record

References

References

https://www.exploit-db.com/exploits/49761	exploit
https://iwantsourcecodes.com/digital-crime-report-management-system-in-php-with-source-code/	product
https://iwantfilemanager.com/?dl=b48d951cbdd50568b031aab3b619fed2	product
https://www.vulncheck.com/advisories/digital-crime-report-management-system-sql-injection	third-party-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.