mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-27 22:52:34 +02:00
921 B
921 B
CVE-2021-21920
Description
A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘surname_filter’ parameter with the administrative account or through cross-site request forgery.
POC
Reference
- https://talosintelligence.com/vulnerability_reports/TALOS-2021-1365
- https://talosintelligence.com/vulnerability_reports/TALOS-2021-1365
Github
No PoCs found on GitHub currently.