CVE-2021-4246

CRITICAL Year: 2021
CVSS v3 Score
9.8
Critical
Weakness Type
CWE-707
View all →

Vulnerability Description

A vulnerability was found in roxlukas LMeve and classified as critical. Affected by this issue is some unknown functionality of the component Login Page. The manipulation of the argument X-Forwarded-For leads to sql injection. The attack may be launched remotely. The name of the patch is 29e1ead3bb1c1fad53b77dfc14534496421c5b5d. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216176.

Related Vulnerabilities

CVE-2021-4261

CRITICAL
CVSS:9.8(Critical)

A vulnerability classified as critical has been found in pacman-canvas up to 1.0.5. Affected is the function addHighscore of the file data/db-handler.php. The manipulation leads to sql injection. It i...

CWE-7072021

CVE-2021-4262

CRITICAL
CVSS:9.8(Critical)

A vulnerability classified as critical was found in laravel-jqgrid. Affected by this vulnerability is the function getRows of the file src/Mgallegos/LaravelJqgrid/Repositories/EloquentRepositoryAbstra...

CWE-7072021

CVE-2022-3332

CRITICAL
CVSS:9.8(Critical)

A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System. This affects an unknown part of the file router.php of the component POST Parameter Handler. Th...

CWE-7072022

CVE-2022-3414

CRITICAL
CVSS:9.8(Critical)

A vulnerability was found in SourceCodester Web-Based Student Clearance System. It has been classified as critical. Affected is an unknown function of the file /Admin/login.php of the component POST P...

CWE-7072022

CVE-2022-3467

CRITICAL
CVSS:9.8(Critical)

A vulnerability classified as critical was found in Jiusi OA. Affected by this vulnerability is an unknown functionality of the file /jsoa/hntdCustomDesktopActionContent. The manipulation of the argum...

CWE-7072022

CVE-2022-3504

CRITICAL
CVSS:9.8(Critical)

A vulnerability was found in SourceCodester Sanitization Management System and classified as critical. This issue affects some unknown processing of the file /php-sms/?p=services/view_service. The man...

CWE-7072022