High severity8.2NVD Advisory· Published Jan 21, 2026· Updated Apr 15, 2026

CVE-2021-47846

Description

Digital Crime Report Management System 1.0 contains a critical SQL injection vulnerability affecting multiple login pages that allows unauthenticated attackers to bypass authentication. Attackers can exploit the vulnerability by sending crafted SQL injection payloads in email and password parameters across police, incharge, user, and HQ login endpoints.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Digital Crime Report Management System/Digital Crime Report Management Systemllm-create
Range: = 1.0

Patches

Vulnerability mechanics

References

iwantfilemanager.comnvd
iwantsourcecodes.com/digital-crime-report-management-system-in-php-with-source-code/nvd
www.exploit-db.com/exploits/49761nvd
www.vulncheck.com/advisories/digital-crime-report-management-system-sql-injectionnvd

News mentions

No linked articles in our index yet.

cvss	0.533
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000