Exploitation Summary
EIP tracks 1 public exploit for CVE-2021-27828. PoCs published by Gulab Mondal.
AI-analyzed exploit summary The exploit demonstrates a SQL injection vulnerability in In4Suite ERP 3.2.74.1370 via the 'txtLoginId' parameter in the login form. It includes both error condition and exploitation examples, showing how an attacker can bypass authentication using a simple SQLi payload.
Description
SQL injection in In4Suite ERP 3.2.74.1370 allows attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries.
Exploits (1)
The exploit demonstrates a SQL injection vulnerability in In4Suite ERP 3.2.74.1370 via the 'txtLoginId' parameter in the login form. It includes both error condition and exploitation examples, showing how an attacker can bypass authentication using a simple SQLi payload.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H