CVE-2021-42169

CVE-2021-42169 describes a critical SQL injection vulnerability in the Simple Payroll System with Dynamic Tax Bracket in PHP using SQLite, specifically affecting the login form's username parameter. This flaw allows remote attackers to bypass authentication for the admin account due to improper input sanitization. With a CVSS score of 9.8, this vulnerability poses a severe risk, enabling full compromise of confidentiality, integrity, and availability without requiring user interaction or complex attack methods. Despite its critical severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.