CVEs-PoC/2021/CVE-2021-30055.md

CVE-2021-30055

Description

A SQL injection vulnerability in Knowage Suite version 7.1 exists in the documentexecution/url analytics driver component via the 'par_year' parameter when running a report.

POC

Reference

• https://github.com/piuppi/Proof-of-Concepts/blob/main/Engineering/SQLi-KnowageSuite.md
• https://github.com/piuppi/Proof-of-Concepts/blob/main/Engineering/SQLi-KnowageSuite.md

Github

• https://github.com/piuppi/Proof-of-Concepts