CVE-2021-28142

HIGH

CITSmart ITSM 9.1.2.27 - 'query' Time-based Blind SQL Injection (Authenticated)

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2021-28142 has a selected CVSS score of 8.8 (high); EIP currently links 1 catalogued exploit.

Description

CITSmart before 9.1.2.28 mishandles the "filtro de autocomplete."

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBCITSmart ITSM 9.1.2.27 - 'query' Time-based Blind SQL Injection (Authenticated)ExploitDB exploitby skysbsbNot analyzed1 file
ExploitDB
PoC details

References

3