CVE-2021-28142

This is a writeup describing a time-based blind SQL injection vulnerability in CITSmart ITSM versions prior to 9.1.2.28. It provides details on the vulnerable parameter and a sqlmap command for exploitation, but does not include functional exploit code.