CVE-2021-41511

CVE-2021-41511 describes a critical SQL injection vulnerability in the Lodging Reservation Management System V1, affecting both the "lodging_reservation_management_system_project" and "lodging_reservation_management_system" products. This flaw allows unauthenticated attackers to bypass authentication by manipulating the username and password fields during login. With a CVSS score of 9.8, this vulnerability poses a severe risk due to its network-based attack vector, low complexity, and complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation, official exploit code, or KEV listing, the vulnerability has garnered significant community discussion, indicating potential interest from threat actors.