CVE-2021-44097

Опубликовано: 02 июн. 2022

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

EGavilan Media Contact-Form-With-Messages-Entry-Management 1.0 is vulnerable to SQL Injection via Addmessage.php. This allows a remote attacker to compromise Application SQL database.

Ссылки

https://github.com/EGavilan-Media/Contact-Form-With-Messages-Entry-Management/issues/1
Exploit
Issue Tracking
Third Party Advisory
https://medium.com/%40shubhamvpandey/cve-2021-44097-d51c11258571
https://github.com/EGavilan-Media/Contact-Form-With-Messages-Entry-Management/issues/1
Exploit
Issue Tracking
Third Party Advisory
https://medium.com/%40shubhamvpandey/cve-2021-44097-d51c11258571

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:contact-form-with-messages-entry-management_project:contact-form-with-messages-entry-management:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 64%

0.00478

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-q54j-m33c-hr83