Vulnerability Details CVE-2021-43481
An SQL Injection vulnerability exists in Webtareas 2.4p3 and earlier via the $uq HTTP POST parameter in editapprovalstage.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 35.6%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- http://packetstormsecurity.com/files/167026/WebTareas-2.4-SQL-Injection.html
- https://behradtaher.dev/2021/11/05/Discovering-a-Blind-SQL-Injection-Whitebox-Approach/
- https://sourceforge.net/projects/webtareas/
- http://packetstormsecurity.com/files/167026/WebTareas-2.4-SQL-Injection.html
- https://behradtaher.dev/2021/11/05/Discovering-a-Blind-SQL-Injection-Whitebox-Approach/
- https://sourceforge.net/projects/webtareas/
Products affected by CVE-2021-43481
-
cpe:2.3:a:webtareas_project:webtareas:2.0
-
cpe:2.3:a:webtareas_project:webtareas:2.1
-
cpe:2.3:a:webtareas_project:webtareas:2.2
-
cpe:2.3:a:webtareas_project:webtareas:2.4